port_check

What port_check does on Mcp Nettools

AI agents call port_check to retrieve information from Mcp Nettools without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why port_check is rated Low

Port checking is a non-destructive network reconnaissance action that only reads the state of a remote TCP port. It does not execute arbitrary code, modify data, delete resources, or commit financial obligations. The tool is passive in nature and typical of network diagnostic utilities. Severity is low because the tool's output is informational only; misuse would reveal network topology but pose minimal direct harm.

From the tool's definition Tool description states it 'Check[s] if a TCP port is open on a host' with parameters for port number and timeout. This is a diagnostic query operation that retrieves network state information without modifying, executing commands, or causing side effects.

The rule that runs port_check safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Nettools, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For port_check, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "port_check": {}
  }
}

Questions about port_check