dhcp_leases

What dhcp_leases does on Mcp Control Plane

AI agents call dhcp_leases to retrieve information from Mcp Control Plane without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why dhcp_leases is rated Low

This tool retrieves DHCP lease data without modifying system state. While classified as Read (no side effects), severity is elevated to 'medium' rather than 'low' because DHCP lease information can expose network topology, connected device MAC addresses, IP allocations, and hostnames—valuable reconnaissance data for an attacker or compromised agent that could inform further attacks on the network infrastructure.

From the tool's definition Tool name 'dhcp_leases' and description 'Return /ip/dhcp-server/lease/print' indicate retrieval of DHCP lease information from what appears to be a MikroTik router API endpoint. The 'print' operation is a read-only query.

The rule that runs dhcp_leases safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Control Plane, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For dhcp_leases, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "dhcp_leases": {}
  }
}

Questions about dhcp_leases