list_firewall_rules

What list_firewall_rules does on 1Panel MCP Server

AI agents call list_firewall_rules to retrieve information from 1Panel MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_firewall_rules is rated Low

This tool only retrieves and displays firewall rules without modifying, executing, deleting, or creating any infrastructure. It is a pure read operation with minimal blast radius if misused by an AI agent—the worst outcome would be information disclosure, which is already public system configuration data. Confidence is high due to explicit use of the 'list' verb and read-only description.

From the tool's definition Tool name 'list_firewall_rules' and description 'List firewall rules' indicate a retrieval operation with no side effects. The verb 'list' is a standard read operation that queries existing firewall configuration data.

The rule that runs list_firewall_rules safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 1Panel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_firewall_rules, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_firewall_rules": {}
  }
}

Questions about list_firewall_rules