get_firewall_logs

What get_firewall_logs does on OPNsense MCP Server

AI agents call get_firewall_logs to retrieve information from OPNsense MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_firewall_logs is rated Low

This tool retrieves and queries firewall log data without modifying, deleting, executing, or creating any resources. It is a straightforward data retrieval operation with minimal blast radius if misused by an AI agent—the worst case would be exposure of log contents that may contain sensitive information, but no actual system changes would occur.

From the tool's definition Tool name 'get_firewall_logs' and description 'Get firewall log entries' indicate a retrieval operation with no side effects. The verb 'Get' and context of querying existing logs confirms read-only functionality.

The rule that runs get_firewall_logs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and OPNsense MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_firewall_logs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_firewall_logs": {}
  }
}

Questions about get_firewall_logs