register_acme_account

What register_acme_account does on Proxmox MCP Server

AI agents use register_acme_account to create or update resources in Proxmox MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Proxmox MCP Server environment.

Why register_acme_account is rated Medium

This tool creates a new account credential/configuration object within the Proxmox ACME system, which is a Write category action. Severity is medium because account registration can affect SSL/TLS certificate management infrastructure, potentially enabling certificate issuance that could be leveraged for man-in-the-middle attacks if an attacker controls account registrations.

From the tool's definition Tool performs 'Register a new ACME account' — a create operation that modifies certificate management configuration state. The action is reversible (account can be deregistered) and does not delete data, execute arbitrary code, or move money.

The rule that runs register_acme_account safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Proxmox MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For register_acme_account, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "register_acme_account": {
      "limits": [
        {
          "counter": "register_acme_account_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about register_acme_account