list_firewall_addresses

What list_firewall_addresses does on Fortimanager

AI agents call list_firewall_addresses to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_firewall_addresses is rated Low

Despite the empty description, the verb 'list' strongly suggests this tool retrieves or enumerates firewall address configurations without modifying them. This is a Read-category operation with low severity since it only accesses configuration data. Confidence is 0.75 rather than higher because the empty description prevents full certainty about underlying behavior, though the naming convention is clear.

From the tool's definition Tool name 'list_firewall_addresses' indicates a listing/querying operation that retrieves firewall address data. The 'list' prefix is characteristic of Read operations that have no side effects.

The rule that runs list_firewall_addresses safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_firewall_addresses, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_firewall_addresses": {}
  }
}

Questions about list_firewall_addresses