get_admin_config

What get_admin_config does on Fortimanager

AI agents call get_admin_config to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_admin_config is rated Low

The tool retrieves or queries administrative configuration data (session timeout, lockout policy) without creating, modifying, deleting, or executing any operations. This is a straightforward read operation with minimal security impact on its own, though the sensitivity of the data retrieved (administrative settings) prevents it from being classified as trivial.

From the tool's definition Tool name 'get_admin_config' and description 'Get administrative settings including session timeout and lockout policy' indicate a retrieval operation with no modification or execution of external operations.

Risk signalsAdmin/system-level operation

The rule that runs get_admin_config safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_admin_config, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_admin_config": {}
  }
}

Questions about get_admin_config