# cmdb_delete

A destructive tool on the FortiOS 7 6 X MCP Server MCP server.

Agent View of the PolicyLayer registry record for `cmdb_delete`. HTML page: https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/cmdb-delete

## Facts

- Tool: `cmdb_delete`
- Server: FortiOS 7 6 X MCP Server (`paoloamato2/fortinet-mcp-server`) — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server.md
- Homepage: https://github.com/paoloamato2/fortinet-mcp-server
- Risk category: Destructive (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Hidden

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "cmdb_delete",
    "arguments": {}
  }
}
```

## Why cmdb_delete is rated Critical

This tool irreversibly deletes configuration data from FortiOS CMDB. Misuse by an AI agent could remove critical firewall rules, security policies, network settings, or other essential configurations, rendering the system non-functional or compromised. This is high-blast-radius destructive action with no undo capability, hence critical severity.

From the tool's own definition: "Tool name 'cmdb_delete' indicates deletion of configuration management database entries. The 'cmdb_' prefix refers to FortiOS configuration database, and 'delete' is an explicit destructive operation."

## Use case

AI agents call cmdb_delete to permanently remove resources in FortiOS 7 6 X MCP Server, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

## Recommended policy (PolicyLayer)

Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches FortiOS 7 6 X MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "cmdb_delete"
  ]
}
```

## Other tools on FortiOS 7 6 X MCP Server (239)

- `firewall_address_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-address-delete.md
- `firewall_addrgrp_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-addrgrp-delete.md
- `firewall_policy_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-policy-delete.md
- `firewall_vip_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-vip-delete.md
- `ips_sensor_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/ips-sensor-delete.md
- `monitor_firewall_session_close` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-firewall-session-close.md
- `monitor_vpn_ssl_delete_user` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-vpn-ssl-delete-user.md
- `router_static_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/router-static-delete.md
- `system_admin_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/system-admin-delete.md
- `system_interface_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/system-interface-delete.md
- `user_group_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/user-group-delete.md
- `user_local_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/user-local-delete.md
- `vpn_ipsec_phase1_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/vpn-ipsec-phase1-delete.md
- `vpn_ipsec_phase2_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/vpn-ipsec-phase2-delete.md
- `vpn_ssl_portal_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/vpn-ssl-portal-delete.md
- `wifi_vap_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/wifi-vap-delete.md
- `monitor_network_ping` — Execute — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-network-ping.md
- `monitor_user_disconnect` — Execute — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-user-disconnect.md
- `wifi_wtp_deauthorize` — Execute — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/wifi-wtp-deauthorize.md
- `monitor_action` — Other — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-action.md
- `service_call` — Other — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/service-call.md
- `antivirus_profile_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/antivirus-profile-get.md
- `antivirus_profile_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/antivirus-profile-list.md
- `antivirus_settings_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/antivirus-settings-get.md
- `application_group_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/application-group-list.md
- `application_list_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/application-list-get.md
- `application_list_profiles` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/application-list-profiles.md
- `automation_setting_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/automation-setting-get.md
- `certificate_ca_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/certificate-ca-list.md
- `certificate_local_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/certificate-local-list.md
- …and 209 more: https://policylayer.com/tools/paoloamato2-fortinet-mcp-server.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=paoloamato2-fortinet-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/paoloamato2-fortinet-mcp-server