# getAppControlRules

Get application control rules for a site, listing application-level firewall rules that allow or block specific apps or app categories.

Agent View of the PolicyLayer registry record for `getAppControlRules`. HTML page: https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getappcontrolrules

## Facts

- Tool: `getAppControlRules`
- Server: Tplink Omada (`migueltvms/tplink-omada-mcp`) — https://policylayer.com/tools/migueltvms-tplink-omada-mcp.md
- Homepage: https://github.com/MiguelTVMS/tplink-omada-mcp
- Risk category: Read (Low risk)
- Registry record: grade C, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "getAppControlRules",
    "arguments": {}
  }
}
```

## Why getAppControlRules is rated Low

This tool queries existing firewall rules configuration. While it is read-only (no data modification), the severity is elevated to medium because the information retrieved (application control policies) could be sensitive network security configuration that an attacker might enumerate to identify control gaps or help craft evasion strategies.

From the tool's own definition: "Tool name 'getAppControlRules' and description states it retrieves/lists 'application control rules' for a site without modifying them. Verb 'Get' and 'listing' indicate read-only retrieval."

## Use case

AI agents call getAppControlRules to retrieve information from Tplink Omada without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Tplink Omada:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "getAppControlRules": {}
  }
}
```

## Other tools on Tplink Omada (326)

- `getAccessControl` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getaccesscontrol.md
- `getAclConfigTypeSetting` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getaclconfigtypesetting.md
- `getAdvancedVpnSetting` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getadvancedvpnsetting.md
- `getAlg` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getalg.md
- `getAllCloudUsers` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getallcloudusers.md
- `getAllDeviceBySite` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getalldevicebysite.md
- `getAllLocalUsers` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getalllocalusers.md
- `getAllRoles` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getallroles.md
- `getAllUsersApp` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getallusersapp.md
- `getApDetail` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapdetail.md
- `getApGeneralConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapgeneralconfig.md
- `getApIpv6Config` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapipv6config.md
- `getApLldpConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getaplldpconfig.md
- `getApLoadBalance` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getaploadbalance.md
- `getApOfdmaConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapofdmaconfig.md
- `getAppControlCategories` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getappcontrolcategories.md
- `getAppGroupProfile` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getappgroupprofile.md
- `getApplicationAcl` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapplicationacl.md
- `getApplicationControlStatus` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapplicationcontrolstatus.md
- `getApQosConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapqosconfig.md
- `getApRadios` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapradios.md
- `getApSnmpConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapsnmpconfig.md
- `getApUplinkConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapuplinkconfig.md
- `getApVlanConfig` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getapvlanconfig.md
- `getAttackDefenseSetting` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getattackdefensesetting.md
- `getAuditLogSettingForGlobal` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getauditlogsettingforglobal.md
- `getAuditLogSettingForSite` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getauditlogsettingforsite.md
- `getAuditLogsForGlobal` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getauditlogsforglobal.md
- `getAvailableRoles` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getavailableroles.md
- `getBackupFileList` — Read — https://policylayer.com/tools/migueltvms-tplink-omada-mcp/getbackupfilelist.md
- …and 296 more: https://policylayer.com/tools/migueltvms-tplink-omada-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=migueltvms-tplink-omada-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/migueltvms-tplink-omada-mcp