get_vpn_remote_certificate

What get_vpn_remote_certificate does on Fortimanager

AI agents call get_vpn_remote_certificate to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_vpn_remote_certificate is rated Low

This tool retrieves or queries certificate information from FortiManager without creating, modifying, deleting, or executing any operations. It is a read-only data retrieval operation with minimal security impact—even if an AI agent accesses certificate metadata, it cannot use that data to directly compromise systems without additional execute or write operations.

From the tool's definition Tool name 'get_vpn_remote_certificate' and description 'Get detailed information about a specific VPN remote certificate' indicate a retrieval operation with no modification or execution of commands.

The rule that runs get_vpn_remote_certificate safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_vpn_remote_certificate, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_vpn_remote_certificate": {}
  }
}

Questions about get_vpn_remote_certificate