GetKMSServer

What GetKMSServer does on Veeam VBR v13 MCP Server

AI agents call GetKMSServer to retrieve information from Veeam VBR v13 MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why GetKMSServer is rated Low

This tool retrieves information about a Key Management Server (KMS) configuration by its identifier. It performs no modifications, deletions, or external operations—merely fetching and returning existing data. The blast radius of misuse is minimal; an agent with access could only read KMS server details but cannot change encryption policies, rotate keys, or affect backup operations.

From the tool's definition Tool name 'GetKMSServer' and description 'Get a specific KMS server by ID' indicate a retrieval operation with no side effects. The verb 'Get' and action of retrieving a KMS server configuration by ID is a read-only query.

The rule that runs GetKMSServer safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For GetKMSServer, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "GetKMSServer": {}
  }
}

Questions about GetKMSServer