update_script

What update_script does on FortiManager MCP Server

AI agents use update_script to create or update resources in FortiManager MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your FortiManager MCP Server environment.

Why update_script is rated Medium

This tool modifies existing CLI scripts reversibly, which is characteristic of a Write operation. However, the severity is high rather than medium because CLI scripts in a centralized firewall management system (FortiManager) can have significant blast radius if maliciously modified—they could alter security policies, network configurations, or device provisioning across an organization's infrastructure.

From the tool's definition Tool name 'update_script' and description 'Update an existing CLI script' indicate modification of existing data. The tool updates CLI scripts used in FortiManager for network configuration and firewall policy management.

The rule that runs update_script safely

PolicyLayer is an MCP gateway: it sits between your AI agents and FortiManager MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_script, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_script": {
      "limits": [
        {
          "counter": "update_script_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_script