get_system_resource_usage

What get_system_resource_usage does on Fortimanager

AI agents call get_system_resource_usage to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_system_resource_usage is rated Low

This tool retrieves system performance metrics and statistics without modifying any configuration, data, or state. It is a read-only diagnostic query typical of monitoring and observability tools. While exposed on a sensitive network management system (FortiManager), the information accessed is non-critical system status data rather than security-critical configurations. Misuse would have minimal blast radius.

From the tool's definition Tool name is 'get_system_resource_usage' and description explicitly states it 'Get system resource usage including CPU, memory, and disk statistics' — purely retrieval of monitoring/diagnostic data with no modification.

The rule that runs get_system_resource_usage safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_system_resource_usage, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_system_resource_usage": {}
  }
}

Questions about get_system_resource_usage