create_package

What create_package does on FortiManager MCP Server

AI agents use create_package to create or update resources in FortiManager MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your FortiManager MCP Server environment.

Why create_package is rated Medium

This tool creates (Write category) a firewall policy package in FortiManager. While not destructive, it introduces new policy configurations that could affect network traffic filtering and security posture across managed devices. Severity is high because misconfigured packages could block legitimate traffic or allow malicious traffic, but the action is reversible through modification or deletion.

From the tool's definition Tool name 'create_package' indicates creation of a new firewall policy package in FortiManager. The empty description limits direct evidence, but context from sibling tools (assign_package, clone_package, assign_system_template) confirms this server manages…

The rule that runs create_package safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiManager MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_package, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_package": {
      "limits": [
        {
          "counter": "create_package_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_package