harden_set_admin_path

What harden_set_admin_path does on Aapanel

AI agents use harden_set_admin_path to create or update resources in Aapanel, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Aapanel environment.

Why harden_set_admin_path is rated Medium

This tool modifies security configuration (admin panel URL path) reversibly; a new path can be set again. It does not execute arbitrary code, delete data, move funds, or execute external operations based on dynamic arguments. While the security implications are significant (misconfiguration could lock out legitimate admins or expose the panel), the action itself is a straightforward configuration write.

From the tool's definition Tool description states 'Change the panel admin access URL path' – this modifies configuration data (the admin URL suffix) that is stored and used by the system. The term 'Change' explicitly indicates a modification operation.

Risk signalsAdmin/system-level operation

The rule that runs harden_set_admin_path safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aapanel, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For harden_set_admin_path, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "harden_set_admin_path": {
      "limits": [
        {
          "counter": "harden_set_admin_path_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about harden_set_admin_path