get_cluster_join_info

What get_cluster_join_info does on Proxmox MCP Server

AI agents call get_cluster_join_info to retrieve information from Proxmox MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_cluster_join_info is rated Low

This tool retrieves cluster join information, which is a read operation. However, the severity is elevated to 'medium' rather than 'low' because the information returned (cluster join credentials, tokens, or connection details) is sensitive infrastructure data that could be misused by an attacker to join unauthorized nodes to the cluster or compromise cluster security if the information is leaked or used maliciously.

From the tool's definition Tool name is 'get_cluster_join_info' and description states it retrieves information ('Get info needed') to join a node to a cluster. This is a retrieval operation with no direct side effects.

The rule that runs get_cluster_join_info safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_cluster_join_info, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_cluster_join_info": {}
  }
}

Questions about get_cluster_join_info