keychaincredential_remote_ssh_scan

What keychaincredential_remote_ssh_scan does on Nasbridge

AI agents call keychaincredential_remote_ssh_scan to retrieve information from Nasbridge without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why keychaincredential_remote_ssh_scan is rated Low

The tool performs network discovery and retrieval of public SSH host keys, which is a non-destructive query operation. While it touches external systems, the action is informational only and does not execute code, modify data, or cause side effects on the target or the TrueNAS system itself.

From the tool's definition Tool name includes 'scan' and description states 'Scan a remote host for its SSH host key' — this is a read-only operation that queries and retrieves the SSH host key from a remote system without modifying or deleting anything.

The rule that runs keychaincredential_remote_ssh_scan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nasbridge, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For keychaincredential_remote_ssh_scan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "keychaincredential_remote_ssh_scan": {}
  }
}

Questions about keychaincredential_remote_ssh_scan