get_supported_model_devices

What get_supported_model_devices does on Fortimanager

AI agents call get_supported_model_devices to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_supported_model_devices is rated Low

This is a simple read operation that queries static information about supported device models. It has no capability to modify, delete, execute code, or affect system state. The blast radius of misuse is minimal—an agent could only retrieve information that is already publicly available as part of the product's device support matrix. This is a low-severity read operation.

From the tool's definition The tool 'get_supported_model_devices' retrieves a list of supported model device platforms. The verb 'get' and the description 'Get list' indicate pure data retrieval with no modifications, side effects, or execution of operations.

The rule that runs get_supported_model_devices safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_supported_model_devices, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_supported_model_devices": {}
  }
}

Questions about get_supported_model_devices