list_fortiaps

What list_fortiaps does on Fortimanager

AI agents call list_fortiaps to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_fortiaps is rated Low

The 'list' prefix is a strong indicator of a retrieval operation with no side effects. Even though the description is empty, the naming convention is sufficiently clear to categorize this as Read. Severity is low because listing devices provides inventory information with minimal blast radius if misused by an agent—it does not modify, delete, or execute anything.

From the tool's definition Tool name 'list_fortiaps' follows the 'list_*' pattern which retrieves or queries data. The empty description limits certainty, but the naming convention strongly indicates a read operation that enumerates FortiAP devices without side effects.

The rule that runs list_fortiaps safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_fortiaps, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_fortiaps": {}
  }
}

Questions about list_fortiaps