get_ceph_config

What get_ceph_config does on Proxmox MCP Server

AI agents call get_ceph_config to retrieve information from Proxmox MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_ceph_config is rated Low

This tool retrieves Ceph cluster configuration information. Reading configuration data has no direct side effects and does not modify, execute, delete, or create resources. While configuration data may be sensitive (potentially revealing infrastructure topology or authentication parameters), the classification is based on the operation itself, which is purely informational.

From the tool's definition Tool name 'get_ceph_config' and description 'Get the raw Ceph configuration' indicate retrieval of configuration data without modification or execution. The verb 'get' and lack of any action words suggesting changes confirm read-only semantics.

The rule that runs get_ceph_config safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_ceph_config, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_ceph_config": {}
  }
}

Questions about get_ceph_config