unifi_get_vpn_server_details

What unifi_get_vpn_server_details does on UniFi Access MCP

AI agents call unifi_get_vpn_server_details to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why unifi_get_vpn_server_details is rated Low

This tool retrieves VPN server configuration details by querying an existing ID. It performs no side effects, does not create, modify, or delete data, and does not execute operations. The blast radius of misuse is minimal—an attacker could learn VPN server settings but cannot alter access control, credentials, door policies, or any other security-sensitive data through this read-only operation alone.

From the tool's definition Tool name 'unifi_get_vpn_server_details' and description 'Get details for a specific VPN server by ID' indicate a retrieval operation with no modification or execution of commands.

The rule that runs unifi_get_vpn_server_details safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unifi_get_vpn_server_details, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unifi_get_vpn_server_details": {}
  }
}

Questions about unifi_get_vpn_server_details