# system_admin_create A write tool on the FortiOS 7 6 X MCP Server MCP server. Agent View of the PolicyLayer registry record for `system_admin_create`. HTML page: https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/system-admin-create ## Facts - Tool: `system_admin_create` - Server: FortiOS 7 6 X MCP Server (`paoloamato2/fortinet-mcp-server`) — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server.md - Homepage: https://github.com/paoloamato2/fortinet-mcp-server - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "system_admin_create", "arguments": {} } } ``` ## Why system_admin_create is rated Medium This tool creates system administrator accounts on a FortiOS firewall. While categorized as Write (reversible modification), the severity is critical because creating unauthorized admin accounts grants complete control of the firewall, affecting network security, access policies, and all protected systems. An AI agent misusing this tool could establish persistent backdoor access. From the tool's own definition: "Tool name is 'system_admin_create' which indicates creation of a system administrator account. The 'create' verb denotes a Write operation that modifies system state by adding new admin credentials." Risk signals: Admin/system-level operation ## Use case AI agents use system_admin_create to create or update resources in FortiOS 7 6 X MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your FortiOS 7 6 X MCP Server environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches FortiOS 7 6 X MCP Server: ```json { "version": "1", "default": "deny", "tools": { "system_admin_create": { "limits": [ { "counter": "system_admin_create_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on FortiOS 7 6 X MCP Server (239) - `cmdb_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/cmdb-delete.md - `firewall_address_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-address-delete.md - `firewall_addrgrp_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-addrgrp-delete.md - `firewall_policy_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-policy-delete.md - `firewall_vip_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/firewall-vip-delete.md - `ips_sensor_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/ips-sensor-delete.md - `monitor_firewall_session_close` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-firewall-session-close.md - `monitor_vpn_ssl_delete_user` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-vpn-ssl-delete-user.md - `router_static_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/router-static-delete.md - `system_admin_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/system-admin-delete.md - `system_interface_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/system-interface-delete.md - `user_group_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/user-group-delete.md - `user_local_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/user-local-delete.md - `vpn_ipsec_phase1_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/vpn-ipsec-phase1-delete.md - `vpn_ipsec_phase2_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/vpn-ipsec-phase2-delete.md - `vpn_ssl_portal_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/vpn-ssl-portal-delete.md - `wifi_vap_delete` — Destructive — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/wifi-vap-delete.md - `monitor_network_ping` — Execute — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-network-ping.md - `monitor_user_disconnect` — Execute — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-user-disconnect.md - `wifi_wtp_deauthorize` — Execute — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/wifi-wtp-deauthorize.md - `monitor_action` — Other — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/monitor-action.md - `service_call` — Other — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/service-call.md - `antivirus_profile_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/antivirus-profile-get.md - `antivirus_profile_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/antivirus-profile-list.md - `antivirus_settings_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/antivirus-settings-get.md - `application_group_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/application-group-list.md - `application_list_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/application-list-get.md - `application_list_profiles` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/application-list-profiles.md - `automation_setting_get` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/automation-setting-get.md - `certificate_ca_list` — Read — https://policylayer.com/tools/paoloamato2-fortinet-mcp-server/certificate-ca-list.md - …and 209 more: https://policylayer.com/tools/paoloamato2-fortinet-mcp-server.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=paoloamato2-fortinet-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/paoloamato2-fortinet-mcp-server