getSshSetting

What getSshSetting does on Tplink Omada

AI agents call getSshSetting to retrieve information from Tplink Omada without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why getSshSetting is rated Low

This tool retrieves SSH access settings, which is a read-only operation with no side effects. While SSH settings are security-sensitive, merely reading them does not expose the actual credentials or enable unauthorized access. The blast radius is minimal—an AI agent could learn about SSH configuration but cannot enable SSH, create accounts, or authenticate as users. This is classified as Read with low severity.

From the tool's definition Tool name 'getSshSetting' and description 'Get SSH access settings for a site' indicate a query operation that retrieves configuration data without modifying it.

The rule that runs getSshSetting safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Tplink Omada, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For getSshSetting, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "getSshSetting": {}
  }
}

Questions about getSshSetting