get_available_package_versions

What get_available_package_versions does on Fortimanager

AI agents call get_available_package_versions to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_available_package_versions is rated Low

This tool appears to query FortiManager for available package versions, which is a read-only retrieval operation. No data is created, modified, deleted, or code is executed. The blast radius is minimal—returning version information cannot harm the system or cause unintended configuration changes. Low severity assigned due to informational nature of the operation.

From the tool's definition Tool name 'get_available_package_versions' indicates retrieval of version information with no modification. Description is empty, but the name strongly suggests a query operation that lists or retrieves existing data without side effects.

The rule that runs get_available_package_versions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_available_package_versions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_available_package_versions": {}
  }
}

Questions about get_available_package_versions