GetAllComputerRecoveryTokens

What GetAllComputerRecoveryTokens does on Veeam VBR v13 MCP Server

AI agents call GetAllComputerRecoveryTokens to retrieve information from Veeam VBR v13 MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why GetAllComputerRecoveryTokens is rated Low

This tool retrieves recovery tokens, which are sensitive authentication/authorization credentials used for initiating bare metal recovery operations. While the action itself is read-only (no data modification), the tokens themselves are highly sensitive security artifacts. Exposure of these tokens could allow unauthorized parties to initiate bare metal recovery operations on critical infrastructure.

From the tool's definition Tool name is 'GetAllComputerRecoveryTokens' and description states it 'Get[s] all recovery tokens for bare metal recovery.' This is a read operation that retrieves security-sensitive tokens used for bare metal disaster recovery.

The rule that runs GetAllComputerRecoveryTokens safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For GetAllComputerRecoveryTokens, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "GetAllComputerRecoveryTokens": {}
  }
}

Questions about GetAllComputerRecoveryTokens