log_ips_attack

What log_ips_attack does on FortiOS 7 6 X MCP Server

AI agents call log_ips_attack to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why log_ips_attack is rated Low

The tool appears to retrieve IPS (Intrusion Prevention System) attack logs, a read operation with no side effects. While the description is empty (lowering confidence), the naming pattern strongly suggests this retrieves historical log data rather than creating, modifying, executing, or deleting anything. The blast radius of accidental misuse is low—returning log data poses no immediate operational risk.

From the tool's definition Tool name 'log_ips_attack' suggests querying/retrieving IPS attack logs. The naming convention aligns with the sibling tools which include 'get' and 'list' operations (e.g., 'antivirus_profile_get', 'certificate_ca_list').

The rule that runs log_ips_attack safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For log_ips_attack, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "log_ips_attack": {}
  }
}

Questions about log_ips_attack