GetObjectReplicaRestorePoints

What GetObjectReplicaRestorePoints does on Veeam VBR v13 MCP Server

AI agents call GetObjectReplicaRestorePoints to retrieve information from Veeam VBR v13 MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why GetObjectReplicaRestorePoints is rated Low

This is a Read operation as it retrieves and queries restore point data without modifying, deleting, or executing anything. Severity is medium (not low) because backup/restore point metadata could be sensitive information that reveals infrastructure topology, backup schedules, and disaster recovery capabilities that could aid an attacker in planning targeted attacks or understanding recovery windows.

From the tool's definition Tool name 'GetObjectReplicaRestorePoints' and description 'Get all restore points for a specific replica' indicate a retrieval operation with no side effects. Uses 'Get' verb and queries/lists existing backup metadata.

The rule that runs GetObjectReplicaRestorePoints safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For GetObjectReplicaRestorePoints, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "GetObjectReplicaRestorePoints": {}
  }
}

Questions about GetObjectReplicaRestorePoints