clearpass_get_server_version

What clearpass_get_server_version does on API-Central

AI agents call clearpass_get_server_version to retrieve information from API-Central without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why clearpass_get_server_version is rated Low

This tool retrieves server version information, which is a read-only query with no side effects. It does not create, modify, delete, or execute any operations. The low severity reflects minimal risk even if misused by an agent, as version information is typically non-sensitive metadata that an attacker would likely discover through other means anyway.

From the tool's definition Tool name 'clearpass_get_server_version' and description 'Get the ClearPass server version' indicate a simple retrieval operation with no parameters that would modify, delete, or execute operations.

The rule that runs clearpass_get_server_version safely

PolicyLayer is an MCP gateway: it sits between your AI agents and API-Central, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For clearpass_get_server_version, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "clearpass_get_server_version": {}
  }
}

Questions about clearpass_get_server_version