site_get_ssl

What site_get_ssl does on Aapanel

AI agents call site_get_ssl to retrieve information from Aapanel without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why site_get_ssl is rated Low

This tool retrieves and queries SSL certificate status, which is a read-only operation that returns information about existing certificates without creating, modifying, deleting, or executing anything. No data is changed, no code is executed, and no external operations are triggered. The blast radius of misuse is minimal—an attacker gains only visibility into certificate metadata.

From the tool's definition Tool name 'site_get_ssl' and description 'Get SSL certificate status for a site' indicate retrieval of certificate information with no modification or side effects.

The rule that runs site_get_ssl safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aapanel, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For site_get_ssl, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "site_get_ssl": {}
  }
}

Questions about site_get_ssl