extract_iso

What extract_iso does on CloudStack MCP Server

AI agents call extract_iso to retrieve information from CloudStack MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why extract_iso is rated Low

This tool retrieves or provides access to an ISO image file, which is a read-only operation. There is no indication that it modifies infrastructure state, executes code, deletes data, or involves financial transactions. The severity is low because downloading an ISO file has minimal blast radius—it cannot directly harm the infrastructure or cause data loss.

From the tool's definition The tool name is 'extract_iso' and description states 'Extract ISO for download'. The action of extracting an ISO image for download is fundamentally a retrieval operation—it retrieves and prepares an ISO file for user access without modifying or deleting the…

The rule that runs extract_iso safely

PolicyLayer is an MCP gateway: it sits between your AI agents and CloudStack MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For extract_iso, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "extract_iso": {}
  }
}

Questions about extract_iso