GetAllGlobalVMExclusions

What GetAllGlobalVMExclusions does on Veeam VBR v13 MCP Server

AI agents call GetAllGlobalVMExclusions to retrieve information from Veeam VBR v13 MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why GetAllGlobalVMExclusions is rated Low

This tool queries and retrieves configuration data about excluded VMs from a backup system. It performs no modifications, deletions, or external operations. The blast radius of misuse is minimal—an attacker gains visibility into backup exclusion policies but cannot alter them, trigger backups, or compromise data. Appropriate for Read category with low severity.

From the tool's definition Tool name 'GetAll...' and description 'Get all global VM exclusions' indicate a retrieval operation with no side effects. The verb 'Get' and lack of any modification language confirm read-only semantics.

The rule that runs GetAllGlobalVMExclusions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For GetAllGlobalVMExclusions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "GetAllGlobalVMExclusions": {}
  }
}

Questions about GetAllGlobalVMExclusions