list_arp_bindings

What list_arp_bindings does on Ikuai

AI agents call list_arp_bindings to retrieve information from Ikuai without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_arp_bindings is rated Low

This tool retrieves and displays ARP binding information from the router without modifying, deleting, or executing any operations. It is a simple read operation that queries the router's ARP binding table. The blast radius of misuse is minimal—an attacker could only gain visibility into network bindings, not modify network configuration or cause destructive changes.

From the tool's definition Tool name 'list_arp_bindings' and description '列出 ARP 绑定列表' (list ARP binding list) indicate a query/retrieval operation. The verb 'list' explicitly denotes a read-only action that retrieves existing ARP binding configuration data.

The rule that runs list_arp_bindings safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ikuai, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_arp_bindings, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_arp_bindings": {}
  }
}

Questions about list_arp_bindings