system_admin_list

What system_admin_list does on FortiOS 7 6 X MCP Server

AI agents call system_admin_list to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why system_admin_list is rated Low

This tool queries and returns information about administrator accounts without creating, modifying, deleting, or executing any operations. It is a straightforward read operation. Severity is low because while account information is sensitive, merely listing accounts does not directly enable unauthorized access or damage without additional exploitation steps.

From the tool's definition Tool name 'system_admin_list' and description 'List all administrator accounts' indicate data retrieval with no modification or execution of commands.

Risk signalsAdmin/system-level operation

The rule that runs system_admin_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For system_admin_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "system_admin_list": {}
  }
}

Questions about system_admin_list