get_device_meta_fields

What get_device_meta_fields does on Fortimanager

AI agents call get_device_meta_fields to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_device_meta_fields is rated Low

The tool appears to retrieve metadata about devices from FortiManager. Metadata retrieval has no side effects and falls under the Read category. Severity is low because metadata queries typically have limited blast radius and do not expose sensitive configurations or enable harmful state changes. Confidence is moderately high based on naming conventions, but lack of description prevents full certainty.

From the tool's definition Tool name 'get_device_meta_fields' indicates a metadata retrieval operation. No description provided, but 'get_' prefix and '_meta_fields' suffix strongly suggest querying/fetching device metadata without modification.

The rule that runs get_device_meta_fields safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_device_meta_fields, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_device_meta_fields": {}
  }
}

Questions about get_device_meta_fields