upload_device_certificate

What upload_device_certificate does on Fortimanager

AI agents use upload_device_certificate to create or update resources in Fortimanager, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Fortimanager environment.

Why upload_device_certificate is rated Medium

Uploading a certificate modifies device configuration and trust relationships. While reversible (certificates can be replaced or removed), this has high severity due to potential impact on device authentication, encryption, and network security. No description provided, which slightly lowers confidence, but the name clearly indicates a write/modification action rather than read, execution, or destruction.

From the tool's definition Tool name 'upload_device_certificate' indicates creation/modification of certificate data on devices. The action of uploading implies pushing new certificate material to FortiManager-managed devices, which is a reversible write operation.

The rule that runs upload_device_certificate safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For upload_device_certificate, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "upload_device_certificate": {
      "limits": [
        {
          "counter": "upload_device_certificate_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about upload_device_certificate