private_ip_ranges

What private_ip_ranges does on TinyFn

AI agents call private_ip_ranges to retrieve information from TinyFn without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why private_ip_ranges is rated Low

This tool retrieves informational data about private IP address ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) with no side effects, modifications, deletions, or external operations. It is a simple lookup/query operation. Severity is low because misuse cannot directly harm systems—at worst, an agent could use this information for reconnaissance planning, but the data is publicly documented and widely known.

From the tool's definition Tool name 'private_ip_ranges' and description 'Get RFC 1918 private IP address ranges' indicate a retrieval operation that returns static reference data about IP address ranges defined in RFC 1918.

The rule that runs private_ip_ranges safely

PolicyLayer is an MCP gateway: it sits between your AI agents and TinyFn, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For private_ip_ranges, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "private_ip_ranges": {}
  }
}

Questions about private_ip_ranges