get_host_ssh_conf

What get_host_ssh_conf does on 1Panel MCP Server

AI agents call get_host_ssh_conf to retrieve information from 1Panel MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_host_ssh_conf is rated Low

This tool retrieves SSH configuration information from the host system. While it is a read-only operation (no data modification), the sensitivity is elevated to medium severity because SSH configuration files often contain sensitive information such as private key paths, authentication methods, allowed users, ports, and other security-critical settings that could be leveraged by an attacker if disclosed.

From the tool's definition Tool name 'get_host_ssh_conf' and description 'Get host SSH config' indicate retrieval of SSH configuration data without modification.

The rule that runs get_host_ssh_conf safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 1Panel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_host_ssh_conf, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_host_ssh_conf": {}
  }
}

Questions about get_host_ssh_conf