get_webfilter_profile

What get_webfilter_profile does on Fortimanager

AI agents call get_webfilter_profile to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_webfilter_profile is rated Low

The 'get_' prefix is a strong signal for Read operations that query data without side effects. However, webfilter profiles on security appliances can contain sensitive configuration details (blocked URLs, filtering rules, policies), making the severity medium rather than low due to potential information disclosure risk. Confidence is moderate due to the empty description, though the naming convention is clear.

From the tool's definition Tool name 'get_webfilter_profile' indicates a retrieval operation. The 'get' prefix strongly suggests querying or fetching data without modification. Description is empty, limiting confidence.

The rule that runs get_webfilter_profile safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_webfilter_profile, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_webfilter_profile": {}
  }
}

Questions about get_webfilter_profile