system_global_get

What system_global_get does on FortiOS 7 6 X MCP Server

AI agents call system_global_get to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why system_global_get is rated Low

This tool performs a data retrieval operation on FortiOS global settings without any side effects. It queries existing configuration state rather than creating, modifying, deleting, or executing actions. The blast radius of misuse is minimal—an attacker could learn system configuration details but cannot change system behavior or access restricted data beyond what the authenticated session already permits.

From the tool's definition Tool name contains 'get' and description explicitly states 'Get FortiOS global settings'; retrieves read-only configuration parameters (hostname, admin timeout, language) with no modification or destructive capability.

Risk signalsAdmin/system-level operation

The rule that runs system_global_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For system_global_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "system_global_get": {}
  }
}

Questions about system_global_get