pfsense_replace_vpn_wireguard_peers

What pfsense_replace_vpn_wireguard_peers does on Pfsense

AI agents use pfsense_replace_vpn_wireguard_peers to create or update resources in Pfsense, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Pfsense environment.

Why pfsense_replace_vpn_wireguard_peers is rated Medium

This tool modifies WireGuard VPN peer configurations, which is reversible (peers can be updated/replaced again). It is not destructive (no deletion), though it does affect active VPN connectivity and trust relationships. The potential impact is high because misconfiguration could disrupt VPN access or security, but the action itself is revertible.

From the tool's definition Tool name includes 'replace' and description shows PUT method, which modifies VPN peer configurations. PUT is an HTTP method that creates or updates resources. The tool operates on 'vpn/wireguard/peers', critical security infrastructure.

The rule that runs pfsense_replace_vpn_wireguard_peers safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_replace_vpn_wireguard_peers, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_replace_vpn_wireguard_peers": {
      "limits": [
        {
          "counter": "pfsense_replace_vpn_wireguard_peers_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about pfsense_replace_vpn_wireguard_peers