unifi_list_dns_records

What unifi_list_dns_records does on UniFi Access MCP

AI agents call unifi_list_dns_records to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why unifi_list_dns_records is rated Low

This tool retrieves or queries DNS records with no side effects. It falls squarely into the Read category. The blast radius is minimal—an AI agent listing DNS records cannot cause damage, only gain visibility into network DNS configuration. Low severity is appropriate for information disclosure of infrastructure settings that are typically non-sensitive or discoverable through other means.

From the tool's definition Tool name 'list_dns_records' and description 'List all static DNS records configured on the controller' indicate a read-only query operation that retrieves existing DNS configuration data without modification or execution.

The rule that runs unifi_list_dns_records safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unifi_list_dns_records, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unifi_list_dns_records": {}
  }
}

Questions about unifi_list_dns_records