pfsense_replace_services_free_radius_users

What pfsense_replace_services_free_radius_users does on Pfsense

AI agents use pfsense_replace_services_free_radius_users to create or update resources in Pfsense, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Pfsense environment.

Why pfsense_replace_services_free_radius_users is rated Medium

This tool modifies user authentication data in FreeRADIUS, a critical authentication service. While 'replace' suggests reversible modification (Write category) rather than irreversible deletion (Destructive), the impact is high because an AI agent could maliciously replace legitimate user credentials, lock out authorized users, or inject unauthorized access.

From the tool's definition Tool name contains 'replace' and description shows PUT method on /api/v2/services/freeradius/users endpoint. PUT is an HTTP method that modifies/replaces data. FreeRADIUS user management controls authentication credentials and access.

The rule that runs pfsense_replace_services_free_radius_users safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_replace_services_free_radius_users, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_replace_services_free_radius_users": {
      "limits": [
        {
          "counter": "pfsense_replace_services_free_radius_users_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about pfsense_replace_services_free_radius_users