protect_get_health

What protect_get_health does on UniFi Access MCP

AI agents call protect_get_health to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why protect_get_health is rated Low

This tool retrieves health/status information from a Protect NVR (Network Video Recorder) system. It performs a query operation with no ability to modify, delete, or execute actions. The output is informational diagnostic data. The blast radius of misuse is minimal—an attacker could learn system health status but cannot compromise security, delete footage, or trigger actions. This is a classic read operation.

From the tool's definition Tool name 'protect_get_health' and description 'Get Protect NVR health metrics' indicate data retrieval with no modification or side effects. The verb 'Get' is explicitly used, and health metrics are read-only diagnostic information.

The rule that runs protect_get_health safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For protect_get_health, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "protect_get_health": {}
  }
}

Questions about protect_get_health