get_cli_template_group_assigned_devices

What get_cli_template_group_assigned_devices does on Fortimanager

AI agents call get_cli_template_group_assigned_devices to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_cli_template_group_assigned_devices is rated Low

The 'get_' prefix establishes this as a read operation that queries and retrieves information about which devices are assigned to a template group. There is no indication of modification, deletion, or execution of commands. The blast radius is minimal as it only exposes device assignment metadata. Confidence is slightly reduced due to empty description, but the naming convention is clear.

From the tool's definition Tool name 'get_cli_template_group_assigned_devices' uses 'get' prefix indicating a read/retrieval operation. No description provided, but the naming pattern clearly indicates data retrieval of assigned devices for a template group.

The rule that runs get_cli_template_group_assigned_devices safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_cli_template_group_assigned_devices, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_cli_template_group_assigned_devices": {}
  }
}

Questions about get_cli_template_group_assigned_devices