get_configuration_changes

What get_configuration_changes does on Fortimanager

AI agents call get_configuration_changes to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_configuration_changes is rated Low

This tool retrieves historical configuration change data for auditing purposes. It performs a read-only query against FortiManager's audit trail, returning information without modifying, executing, or deleting anything. The low severity reflects minimal blast radius—an AI agent misusing this tool would only expose audit information, not compromise system integrity or operations.

From the tool's definition Tool name is 'get_configuration_changes' and description states 'Get recent configuration changes for audit trail' — the verb 'Get' and purpose of retrieving audit information indicates data retrieval with no side effects.

The rule that runs get_configuration_changes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_configuration_changes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_configuration_changes": {}
  }
}

Questions about get_configuration_changes