list_wildcard_fqdn_addresses

What list_wildcard_fqdn_addresses does on Fortimanager

AI agents call list_wildcard_fqdn_addresses to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_wildcard_fqdn_addresses is rated Low

The 'list' prefix strongly indicates a retrieval operation with no side effects. Even though the description is empty, the naming convention and context of other tools on the FortiManager server that include write/execute operations (add_*, delete_*) makes it clear this tool queries existing FQDN address data rather than modifying it. This is consistent with FortiManager's management API patterns.

From the tool's definition Tool name indicates 'list' operation which retrieves data without modification. The 'wildcard_fqdn_addresses' suffix suggests querying firewall address objects.

The rule that runs list_wildcard_fqdn_addresses safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_wildcard_fqdn_addresses, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_wildcard_fqdn_addresses": {}
  }
}

Questions about list_wildcard_fqdn_addresses