log_disk_filter_get

What log_disk_filter_get does on FortiOS 7 6 X MCP Server

AI agents call log_disk_filter_get to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why log_disk_filter_get is rated Low

This tool performs a read-only query of existing log filter configuration. It retrieves data about which disk log types are currently enabled without creating, modifying, deleting, or executing any operations. The blast radius of misuse is minimal - an attacker would only gain visibility into logging configuration, not the ability to change it or access actual logs.

From the tool's definition The tool description explicitly states 'Get the disk log filter settings' which is a retrieval operation with no modification or side effects. It queries which log types are enabled without changing any configuration.

The rule that runs log_disk_filter_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For log_disk_filter_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "log_disk_filter_get": {}
  }
}

Questions about log_disk_filter_get