create_sdn_vnet

What create_sdn_vnet does on Proxmox MCP Server

AI agents use create_sdn_vnet to create or update resources in Proxmox MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Proxmox MCP Server environment.

Why create_sdn_vnet is rated Medium

This tool creates a new SDN virtual network configuration. Creating network infrastructure is a write operation—it establishes new network state that can be modified or deleted later. The severity is high because misconfiguration or unauthorized creation of virtual networks could enable network isolation bypass, lateral movement, or denial of service to existing infrastructure.

From the tool's definition Tool name 'create_sdn_vnet' indicates creation of a network resource. Description explicitly states 'Create an SDN VNet' (Software-Defined Network Virtual Network). SDN VNet creation is a reversible network configuration operation.

The rule that runs create_sdn_vnet safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_sdn_vnet, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_sdn_vnet": {
      "limits": [
        {
          "counter": "create_sdn_vnet_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_sdn_vnet