get_cluster_totem

What get_cluster_totem does on Proxmox MCP Server

AI agents call get_cluster_totem to retrieve information from Proxmox MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_cluster_totem is rated Low

This tool retrieves cluster configuration data (corosync totem settings) used for cluster consensus and heartbeat mechanisms. Reading configuration does not modify state, execute commands, or affect infrastructure operations. The blast radius of misuse is minimal — an attacker gains visibility into cluster topology and timing parameters but cannot directly manipulate the cluster or cause harm through the read alone.

From the tool's definition Tool name is 'get_cluster_totem' and description states 'Get the corosync totem configuration' — both indicate a retrieval operation with no modification or execution of external commands.

The rule that runs get_cluster_totem safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_cluster_totem, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_cluster_totem": {}
  }
}

Questions about get_cluster_totem