user_saml_list

What user_saml_list does on FortiOS 7 6 X MCP Server

AI agents call user_saml_list to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why user_saml_list is rated Low

This tool retrieves and enumerates existing SAML identity provider configurations without altering state, executing commands, or accessing sensitive user data beyond administrative metadata. While SAML configurations may be security-relevant, listing them is informational only. The low severity reflects minimal blast radius if misused by an agent — it cannot modify, delete, or execute operations.

From the tool's definition Tool name contains 'list' and description states 'List all SAML identity provider configurations' — a pure query operation with no modification, deletion, or execution of code.

The rule that runs user_saml_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For user_saml_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "user_saml_list": {}
  }
}

Questions about user_saml_list