list_system_certificates

What list_system_certificates does on Fortimanager

AI agents call list_system_certificates to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_system_certificates is rated Low

This tool retrieves system certificates from FortiManager without modifying them. Certificates are sensitive data (can reveal infrastructure, trust chains, and security posture), warranting medium severity even as a Read operation. Confidence is moderate (0.75) due to empty description; it could theoretically involve more complex certificate operations, but the name strongly indicates a list/query function.

From the tool's definition Tool name 'list_system_certificates' indicates retrieval of certificate data. Description is empty, but the naming pattern (list_*) is consistent with Read operations on this server alongside other query-style tools like 'add_*' and 'abort_*'.

The rule that runs list_system_certificates safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_system_certificates, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_system_certificates": {}
  }
}

Questions about list_system_certificates