user_ldap_list

What user_ldap_list does on FortiOS 7 6 X MCP Server

AI agents call user_ldap_list to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why user_ldap_list is rated Low

This tool retrieves LDAP authentication server configurations without altering them. While the severity is medium rather than low because LDAP configurations may contain sensitive authentication details (server addresses, bind credentials references, or directory structure information) that could be used for reconnaissance or further attacks, the tool itself performs only data retrieval with no side effects.

From the tool's definition Tool name contains 'list' and description states 'List all LDAP authentication server configurations', which is a read-only retrieval operation with no modification or deletion of data.

The rule that runs user_ldap_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For user_ldap_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "user_ldap_list": {}
  }
}

Questions about user_ldap_list