StartSecurityAnalyzer

What StartSecurityAnalyzer does on Veeam VBR v13 MCP Server

AI agents invoke StartSecurityAnalyzer to trigger actions in Veeam VBR v13 MCP Server. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why StartSecurityAnalyzer is rated High

This tool executes an analysis operation on the backup infrastructure, which is an actionable trigger with external effects—the analyzer will scan systems and generate compliance reports. While the operation itself is non-destructive and read-focused in nature, it belongs to Execute rather than Read because it actively invokes a system process whose scope and depth depend on infrastructure state and configuration.

From the tool's definition Tool name 'StartSecurityAnalyzer' and description 'Start the Security & Compliance Analyzer to check the backup infrastructure against best practices' indicate initiation of a scanning/analysis operation that triggers external processes within the Veeam…

The rule that runs StartSecurityAnalyzer safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Veeam VBR v13 MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For StartSecurityAnalyzer, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "StartSecurityAnalyzer": {
      "limits": [
        {
          "counter": "startsecurityanalyzer_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about StartSecurityAnalyzer