dlp_sensor_list

What dlp_sensor_list does on FortiOS 7 6 X MCP Server

AI agents call dlp_sensor_list to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why dlp_sensor_list is rated Low

This tool queries and returns a list of existing DLP (Data Loss Prevention) sensors from FortiOS. It performs no write, delete, execute, or financial operations. The blast radius if misused is minimal—an agent gaining access to DLP sensor configurations could learn organizational security policies but cannot alter them or cause harm through this operation alone. Classified as Read with low severity.

From the tool's definition Tool name 'dlp_sensor_list' and description 'List all DLP sensors' indicate a query/retrieval operation with the verb 'list', which retrieves data without modification or side effects.

The rule that runs dlp_sensor_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For dlp_sensor_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "dlp_sensor_list": {}
  }
}

Questions about dlp_sensor_list