list_firewall_zones

What list_firewall_zones does on Fortimanager

AI agents call list_firewall_zones to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_firewall_zones is rated Low

The 'list' prefix strongly suggests a read-only query operation that retrieves firewall zone data without side effects. While the description is empty, the tool name and context within a FortiManager admin interface indicate this retrieves existing configuration data. The low severity reflects that listing zones exposes configuration information but does not permit modification or destructive actions.

From the tool's definition Tool name 'list_firewall_zones' indicates a retrieval operation that queries and enumerates firewall zone configurations. No parameters for modification, deletion, or execution are described.

The rule that runs list_firewall_zones safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_firewall_zones, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_firewall_zones": {}
  }
}

Questions about list_firewall_zones