list_pppoe_online_users

What list_pppoe_online_users does on Ikuai

AI agents call list_pppoe_online_users to retrieve information from Ikuai without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_pppoe_online_users is rated Low

This tool retrieves information about currently connected PPPoE users on the iKuai router. It is a read-only operation that queries existing data without side effects. Severity is medium rather than low because knowledge of active user sessions could be sensitive information useful for reconnaissance or user targeting in a compromised agent scenario, though the direct harm is limited to information disclosure.

From the tool's definition Tool name 'list_pppoe_online_users' and description '列出当前在线账号' (list current online accounts) indicates querying/retrieving active PPPoE user session data with no modification or deletion.

The rule that runs list_pppoe_online_users safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Ikuai, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_pppoe_online_users, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_pppoe_online_users": {}
  }
}

Questions about list_pppoe_online_users