GetAllBackupObjects

What GetAllBackupObjects does on Veeam VBR v13 MCP Server

AI agents call GetAllBackupObjects to retrieve information from Veeam VBR v13 MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why GetAllBackupObjects is rated Low

This is a read-only operation that retrieves backup inventory data. While the severity is elevated to 'medium' (rather than 'low') because the data retrieved includes sensitive infrastructure details about all VMs and servers in the backup environment—information that could be valuable for reconnaissance or lateral movement planning by an adversary—the tool itself performs no destructive, executable, or financial…

From the tool's definition Tool name 'GetAllBackupObjects' and description 'Get all backup objects (VMs, servers) across all backups' indicate a retrieval/query operation with no modification or execution of side effects.

The rule that runs GetAllBackupObjects safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For GetAllBackupObjects, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "GetAllBackupObjects": {}
  }
}

Questions about GetAllBackupObjects