get_adom_policy_statistics

What get_adom_policy_statistics does on Fortimanager

AI agents call get_adom_policy_statistics to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_adom_policy_statistics is rated Low

This tool retrieves and returns statistics about policies in an ADOM (Administrative Domain) without modifying, executing, or deleting any data. It is a pure data retrieval operation with minimal blast radius if misused by an AI agent—the worst outcome would be unauthorized visibility into policy statistics, not system alteration or financial impact.

From the tool's definition Tool name 'get_adom_policy_statistics' and description 'Get comprehensive policy count statistics for an ADOM' indicate data retrieval with no side effects. The verb 'Get' and noun 'statistics' confirm a read-only query operation.

The rule that runs get_adom_policy_statistics safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_adom_policy_statistics, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_adom_policy_statistics": {}
  }
}

Questions about get_adom_policy_statistics