get_virtual_ip

What get_virtual_ip does on Fortimanager

AI agents call get_virtual_ip to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_virtual_ip is rated Low

This tool retrieves configuration details about a virtual IP resource. The 'get' prefix and 'details' language clearly indicate a read-only query operation with no side effects. Even in a security management context (FortiManager), retrieving IP configuration data poses minimal risk compared to modification or deletion operations. The blast radius of misuse is limited to information disclosure.

From the tool's definition Tool name 'get_virtual_ip' and description 'Get details of a specific virtual IP' indicate retrieval of existing data without modification or deletion.

The rule that runs get_virtual_ip safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_virtual_ip, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_virtual_ip": {}
  }
}

Questions about get_virtual_ip