proxmox_configure_firewall

What proxmox_configure_firewall does on MCP Proxmox Server

AI agents use proxmox_configure_firewall to create or update resources in MCP Proxmox Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your MCP Proxmox Server environment.

Why proxmox_configure_firewall is rated Medium

This tool modifies firewall rules on Proxmox VMs, which is a Write operation—it creates or updates configurations. While firewall rule changes can have security implications if misconfigured, they are reversible (rules can be reconfigured or removed). The severity is high because incorrect firewall configuration could expose VMs to network attacks or break legitimate traffic flow, impacting infrastructure security.

From the tool's definition Tool name is 'proxmox_configure_firewall' and description states 'Configure VM-level firewall rules'. The verb 'configure' indicates modification of firewall settings, which are reversible configurations rather than irreversible deletions.

The rule that runs proxmox_configure_firewall safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Proxmox Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For proxmox_configure_firewall, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "proxmox_configure_firewall": {
      "limits": [
        {
          "counter": "proxmox_configure_firewall_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about proxmox_configure_firewall