list_global_firewall_services

What list_global_firewall_services does on Fortimanager

AI agents call list_global_firewall_services to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_global_firewall_services is rated Low

List operations retrieve data without side effects. While firewall service configuration data could be sensitive, the tool itself performs no write, delete, execute, or financial operations. It only exposes information about existing services in a read-only manner. Confidence is slightly reduced due to the empty description, but the verb 'list' is unambiguous.

From the tool's definition Tool name 'list_global_firewall_services' uses the 'list' verb, which is a read-only query operation. The description is empty, but the naming convention strongly suggests it retrieves and enumerates firewall services without modifying them.

The rule that runs list_global_firewall_services safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_global_firewall_services, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_global_firewall_services": {}
  }
}

Questions about list_global_firewall_services