get_system_routes

What get_system_routes does on Fortimanager

AI agents call get_system_routes to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_system_routes is rated Low

This tool retrieves system route configuration from FortiManager without modifying or executing anything. Even though the description is empty, the name strongly suggests a query operation. The blast radius of exposing route information is low—an AI agent learning about routes cannot directly damage systems. Low severity is appropriate for read-only network configuration queries.

From the tool's definition Tool name 'get_system_routes' indicates retrieval of routing information with no mutation verb (no create, update, delete, or execute keywords). The empty description limits evidence, but the verb 'get' is characteristic of read-only operations.

The rule that runs get_system_routes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_system_routes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_system_routes": {}
  }
}

Questions about get_system_routes