vpn_ipsec_phase2_get

What vpn_ipsec_phase2_get does on FortiOS 7 6 X MCP Server

AI agents call vpn_ipsec_phase2_get to retrieve information from FortiOS 7 6 X MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why vpn_ipsec_phase2_get is rated Low

The 'get' verb and lack of mutation keywords (create, delete, update) indicate this tool retrieves VPN IPsec Phase 2 configuration data. While retrieval, the severity is medium rather than low because IPsec configurations may contain sensitive security parameters (encryption algorithms, authentication methods, peer information) that could inform an attacker about infrastructure.

From the tool's definition Tool name 'vpn_ipsec_phase2_get' contains 'get' suffix, indicating a retrieval operation. No description provided, but naming convention and context of sibling tools (all retrieval/configuration tools ending in _get, _list) strongly suggest read-only…

The rule that runs vpn_ipsec_phase2_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiOS 7 6 X MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For vpn_ipsec_phase2_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "vpn_ipsec_phase2_get": {}
  }
}

Questions about vpn_ipsec_phase2_get