pfsense_get_services_haproxy_file

What pfsense_get_services_haproxy_file does on Pfsense

AI agents call pfsense_get_services_haproxy_file to retrieve information from Pfsense without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pfsense_get_services_haproxy_file is rated Low

This tool retrieves HAProxy configuration file data from the pfSense firewall. While it is a Read operation with no side effects, the severity is elevated to medium because HAProxy configuration files may contain sensitive information (certificates, passwords, backend server details, access control lists) that could be exploited if disclosed to an attacker or misused by a compromised agent.

From the tool's definition Tool name contains 'get' and description shows 'GET' HTTP method retrieving '/api/v2/services/haproxy/file', indicating data retrieval with no modification.

The rule that runs pfsense_get_services_haproxy_file safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_get_services_haproxy_file, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_get_services_haproxy_file": {}
  }
}

Questions about pfsense_get_services_haproxy_file