get_ipsec_phase1_interface

What get_ipsec_phase1_interface does on Fortimanager

AI agents call get_ipsec_phase1_interface to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_ipsec_phase1_interface is rated Low

This tool queries and retrieves configuration details about IPsec Phase1 interfaces. It has no side effects—it does not create, modify, delete, or execute operations. The 'get' verb and 'detailed information' phrasing confirm a read-only operation. Severity is low because accessing network configuration metadata poses minimal risk compared to tools that could modify or delete configurations.

From the tool's definition Tool name 'get_ipsec_phase1_interface' and description 'Get detailed information about a specific IPsec Phase1 interface' indicate retrieval of existing data without modification or execution of commands.

The rule that runs get_ipsec_phase1_interface safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_ipsec_phase1_interface, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_ipsec_phase1_interface": {}
  }
}

Questions about get_ipsec_phase1_interface