pfsense_update_user

What pfsense_update_user does on Pfsense

AI agents use pfsense_update_user to create or update resources in Pfsense, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Pfsense environment.

Why pfsense_update_user is rated Medium

The tool modifies user records on a pfSense firewall, which is a Write operation (reversible modification). However, it is classified as 'high' severity rather than 'medium' because user account modifications on security-critical infrastructure like firewalls have significant blast radius—an attacker could create backdoor accounts, escalate privileges, or lock out legitimate administrators.

From the tool's definition Tool name is 'pfsense_update_user' indicating modification of user data; server description states it 'gives AI agents full control over pfSense firewalls via REST API v2' with 677 tools covering 'users' among other critical infrastructure components.

The rule that runs pfsense_update_user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pfsense, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pfsense_update_user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_update_user": {
      "limits": [
        {
          "counter": "pfsense_update_user_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about pfsense_update_user