upload_ssl

What upload_ssl does on 1Panel MCP Server

AI agents use upload_ssl to create or update resources in 1Panel MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your 1Panel MCP Server environment.

Why upload_ssl is rated Medium

Uploading an SSL certificate modifies server security configuration reversibly (certificates can be replaced or removed). While not destructive and not directly executing arbitrary code, it impacts server security posture and HTTPS/TLS functionality. The high severity reflects the security-critical nature of SSL certificates in server infrastructure, though the operation itself is reversible.

From the tool's definition Tool name 'upload_ssl' combined with description 'Upload SSL certificate' indicates creation/modification of SSL certificate data on the server. This is a Write operation that creates or modifies security-critical configuration.

The rule that runs upload_ssl safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 1Panel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For upload_ssl, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "upload_ssl": {
      "limits": [
        {
          "counter": "upload_ssl_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about upload_ssl