list_auth_domains

What list_auth_domains does on Proxmox MCP Server

AI agents call list_auth_domains to retrieve information from Proxmox MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_auth_domains is rated Low

This tool retrieves and enumerates existing authentication domain configurations (PAM, PVE, LDAP, AD, OpenID). It performs no write, delete, execute, or financial operations. The action is informational only, with minimal blast radius if misused—an AI agent listing auth domains cannot compromise systems or cause unintended side effects. This is a standard Read category tool.

From the tool's definition Tool name 'list_auth_domains' and description 'List configured authentication realms/domains' indicate a read-only query operation that retrieves configuration metadata without modifying or executing any infrastructure changes.

The rule that runs list_auth_domains safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_auth_domains, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_auth_domains": {}
  }
}

Questions about list_auth_domains