get_system_global_settings

What get_system_global_settings does on Fortimanager

AI agents call get_system_global_settings to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_system_global_settings is rated Low

The naming convention 'get_*' is a standard Read operation pattern. Retrieving system global settings from FortiManager is a non-destructive information query that does not modify state, execute commands, or incur financial impact. The empty description reduces confidence slightly, but the tool name itself provides sufficient evidence for Read classification.

From the tool's definition Tool name 'get_system_global_settings' indicates data retrieval ('get') of read-only system configuration. The description is empty, limiting direct confirmation, but the getter pattern strongly suggests a query operation with no side effects.

The rule that runs get_system_global_settings safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_system_global_settings, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_system_global_settings": {}
  }
}

Questions about get_system_global_settings