system_snmp_community_list

What system_snmp_community_list does on FortiOS 7 6 X MCP Server

AI agents call system_snmp_community_list to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why system_snmp_community_list is rated Low

This tool retrieves SNMP community configurations, which are security credentials. While it is a read-only operation (no side effects), SNMP communities are sensitive authentication data. Exposure of this list could aid reconnaissance or credential enumeration attacks, warranting medium severity despite being in the Read category. The confidence is high because the intent is unambiguous.

From the tool's definition Tool name contains 'list' and description states 'List SNMP v1/v2c communities' - a retrieval operation with no modification capability.

Risk signalsAdmin/system-level operation

The rule that runs system_snmp_community_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For system_snmp_community_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "system_snmp_community_list": {}
  }
}

Questions about system_snmp_community_list