firewall_get_rules

What firewall_get_rules does on OPNsense MCP Server

AI agents call firewall_get_rules to retrieve information from OPNsense MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why firewall_get_rules is rated Low

This tool retrieves firewall rules from OPNsense without any side effects. It is a read-only query operation that returns existing configuration data. While firewall rules are security-sensitive information, the tool merely retrieves them without executing, modifying, or deleting them. Severity is low because reading firewall configuration poses minimal risk compared to execution or destructive operations.

From the tool's definition Tool name 'firewall_get_rules' and description 'Get OPNsense firewall rules' indicate data retrieval with no modification or deletion of firewall rules.

The rule that runs firewall_get_rules safely

PolicyLayer is an MCP gateway: it sits between your AI agents and OPNsense MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For firewall_get_rules, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "firewall_get_rules": {}
  }
}

Questions about firewall_get_rules