firewall_address_get

What firewall_address_get does on FortiOS 7 6 X MCP Server

AI agents call firewall_address_get to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why firewall_address_get is rated Low

This tool queries firewall address configuration from the FortiOS REST API. The '_get' suffix and its position among sibling read-only tools indicate it retrieves but does not modify data. The blast radius is minimal—exposure only allows querying existing firewall rules, not changing them. Low confidence penalty (0.95 instead of 1.0) applied because the description is empty, though the name is sufficiently clear.

From the tool's definition Tool name 'firewall_address_get' uses the 'get' verb, which retrieves data without modification. The sibling tools pattern (antivirus_profile_get, antivirus_settings_get, certificate_ca_list, certificate_local_list) confirms this server's convention that…

The rule that runs firewall_address_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For firewall_address_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "firewall_address_get": {}
  }
}

Questions about firewall_address_get