pfsense_get_routing_gateway_default

What pfsense_get_routing_gateway_default does on Pfsense

AI agents call pfsense_get_routing_gateway_default to retrieve information from Pfsense without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pfsense_get_routing_gateway_default is rated Low

This tool queries firewall routing configuration data with no side effects. Despite the sensitive nature of pfSense firewalls, read access to gateway settings is a retrieval operation that does not create, modify, delete, or execute operations. The severity is low because gateway configuration information is typically not confidential and reading it does not enable direct attacks.

From the tool's definition Tool name contains 'get' and description shows 'GET /api/v2/routing/gateway/default' — a read-only HTTP GET operation that retrieves the default routing gateway configuration without modification.

The rule that runs pfsense_get_routing_gateway_default safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_get_routing_gateway_default, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_get_routing_gateway_default": {}
  }
}

Questions about pfsense_get_routing_gateway_default