pfsense_get_interface_vlan

What pfsense_get_interface_vlan does on Pfsense

AI agents call pfsense_get_interface_vlan to retrieve information from Pfsense without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pfsense_get_interface_vlan is rated Low

This tool retrieves VLAN interface configuration data from a pfSense firewall without modifying any state. While the Read category typically has low severity, the medium rating reflects that VLAN configuration details could inform network reconnaissance or inform decisions for subsequent firewall manipulation on this high-sensitivity system. The tool itself performs no side effects.

From the tool's definition Tool name 'pfsense_get_interface_vlan' and description 'GET /api/v2/interface/vlan' indicate a read-only retrieval operation using the HTTP GET method.

The rule that runs pfsense_get_interface_vlan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_get_interface_vlan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_get_interface_vlan": {}
  }
}

Questions about pfsense_get_interface_vlan