list_tacacs_plus_servers

What list_tacacs_plus_servers does on Fortimanager

AI agents call list_tacacs_plus_servers to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_tacacs_plus_servers is rated Low

TACACS+ server configurations contain authentication infrastructure details that could be sensitive (IP addresses, server information). Retrieving this information poses medium severity risk if an AI agent misuses access to query sensitive authentication system details, but as a Read operation with no data modification capability, it ranks below Write/Execute/Destructive categories.

From the tool's definition Tool name 'list_tacacs_plus_servers' indicates retrieval of TACACS+ server configuration data. The description is empty, limiting certainty, but the 'list_*' verb pattern is consistent with Read operations (query/retrieve without side effects).

The rule that runs list_tacacs_plus_servers safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_tacacs_plus_servers, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_tacacs_plus_servers": {}
  }
}

Questions about list_tacacs_plus_servers