unifi_list_acl_rules

What unifi_list_acl_rules does on UniFi Access MCP

AI agents call unifi_list_acl_rules to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why unifi_list_acl_rules is rated Low

This tool retrieves MAC ACL rules for read-only inspection. While it does not modify data (making it a Read operation), the severity is medium rather than low because ACL rules are security-critical access control configurations. Unauthorized disclosure or exfiltration of access control policies could enable an attacker to understand network segmentation and plan circumvention strategies.

From the tool's definition Tool name is 'unifi_list_acl_rules' and description states 'List MAC ACL rules (Policy Engine) for Layer 2 access control.' The verb 'list' indicates retrieval/query of existing data without modification.

The rule that runs unifi_list_acl_rules safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unifi_list_acl_rules, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unifi_list_acl_rules": {}
  }
}

Questions about unifi_list_acl_rules