get_ceph_crush_rules

What get_ceph_crush_rules does on Proxmox MCP Server

AI agents call get_ceph_crush_rules to retrieve information from Proxmox MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_ceph_crush_rules is rated Low

This tool retrieves CRUSH rule configuration from a Ceph storage cluster. CRUSH rules define data placement policies but the 'get' operation only reads this information without creating, modifying, deleting, or executing actions. It has no side effects and presents minimal security risk if misused by an AI agent, as it only exposes configuration metadata.

From the tool's definition Tool name 'get_ceph_crush_rules' uses the verb 'get', which retrieves data. Description states 'Get Ceph CRUSH rules', indicating a read-only query operation that retrieves cluster placement rules without modification.

The rule that runs get_ceph_crush_rules safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_ceph_crush_rules, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_ceph_crush_rules": {}
  }
}

Questions about get_ceph_crush_rules