pfsense_get_services_acme_certificate_domain

What pfsense_get_services_acme_certificate_domain does on Pfsense

AI agents call pfsense_get_services_acme_certificate_domain to retrieve information from Pfsense without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pfsense_get_services_acme_certificate_domain is rated Low

This is a read-only operation that queries certificate domain data from the pfSense firewall. It has no side effects and does not modify, create, delete, or execute any operations. While the server grants broad control over firewalls, this particular tool only retrieves information, making it a Read category risk with low severity.

From the tool's definition Tool name contains 'get' and description shows HTTP GET method (/api/v2/services/acme/certificate/domain). Retrieves ACME certificate domain information without modification.

The rule that runs pfsense_get_services_acme_certificate_domain safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_get_services_acme_certificate_domain, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_get_services_acme_certificate_domain": {}
  }
}

Questions about pfsense_get_services_acme_certificate_domain