list_ssh_filter_profiles

What list_ssh_filter_profiles does on Fortimanager

AI agents call list_ssh_filter_profiles to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_ssh_filter_profiles is rated Low

The tool appears to retrieve or enumerate SSH filter profiles from FortiManager without modifying or deleting data. This is a read operation with minimal blast radius—an agent could discover SSH filter configuration details, but cannot alter security policies or cause irreversible damage. Classification as Read with low severity is appropriate.

From the tool's definition Tool name 'list_ssh_filter_profiles' indicates retrieval of SSH filter profile configurations. The 'list_' prefix is a standard pattern for query/retrieve operations with no side effects. Description is empty, which slightly reduces confidence.

The rule that runs list_ssh_filter_profiles safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_ssh_filter_profiles, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_ssh_filter_profiles": {}
  }
}

Questions about list_ssh_filter_profiles