pfsense_get_routing_gateway

What pfsense_get_routing_gateway does on Pfsense

AI agents call pfsense_get_routing_gateway to retrieve information from Pfsense without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pfsense_get_routing_gateway is rated Low

This is a read operation that queries gateway routing configuration from pfSense. While severity is elevated to medium because gateway information could be used to understand firewall topology and routing paths (useful for planning attacks), the tool itself performs no modifications or destructive actions. The blast radius is contained to information disclosure risk rather than direct system compromise.

From the tool's definition Tool name contains 'get' and description shows a GET HTTP method to a read-only endpoint (/api/v2/routing/gateway). The action retrieves gateway routing information without modifying state.

The rule that runs pfsense_get_routing_gateway safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_get_routing_gateway, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_get_routing_gateway": {}
  }
}

Questions about pfsense_get_routing_gateway