pfsense_get_system_restapi_access_list_entry

What pfsense_get_system_restapi_access_list_entry does on Pfsense

AI agents call pfsense_get_system_restapi_access_list_entry to retrieve information from Pfsense without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pfsense_get_system_restapi_access_list_entry is rated Low

This tool retrieves/queries REST API access control list data. While it is a Read operation (no data modification), the severity is high because the access list entries contain security-sensitive information (API authentication credentials and access permissions) that could be leveraged by an attacker to escalate privileges, impersonate authorized users, or gain broader firewall control within the same network…

From the tool's definition Tool name includes 'get' and description shows a GET endpoint (/api/v2/system/restapi/access_list/entry) that retrieves system REST API access list entries with no modification indicated.

The rule that runs pfsense_get_system_restapi_access_list_entry safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_get_system_restapi_access_list_entry, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_get_system_restapi_access_list_entry": {}
  }
}

Questions about pfsense_get_system_restapi_access_list_entry