get_docker_container_status

What get_docker_container_status does on Fortimanager

AI agents call get_docker_container_status to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_docker_container_status is rated Low

The 'get' prefix is characteristic of Read operations that retrieve information without modifying system state. Querying container status is a non-destructive, non-side-effecting query. Despite the empty description lowering confidence slightly, the tool name provides sufficient evidence. Severity is low because status queries have minimal blast radius even if misused by an agent.

From the tool's definition Tool name 'get_docker_container_status' indicates a retrieval operation ('get') that queries the status of a Docker container. The description is empty, but the naming convention strongly suggests a read-only query.

The rule that runs get_docker_container_status safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_docker_container_status, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_docker_container_status": {}
  }
}

Questions about get_docker_container_status