iscsi_global_config

What iscsi_global_config does on Truenas

AI agents call iscsi_global_config to retrieve information from Truenas without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why iscsi_global_config is rated Low

This tool retrieves configuration data about iSCSI global settings without performing any write, destructive, execute, or financial operations. The verb 'Get' is characteristic of Read category tools. While misconfiguration details could theoretically inform an attack, retrieving configuration is fundamentally non-destructive and has minimal blast radius in isolation.

From the tool's definition Tool name and description indicate 'Get iSCSI global configuration' - a retrieval operation with no modification, deletion, or execution of commands.

The rule that runs iscsi_global_config safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Truenas, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For iscsi_global_config, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "iscsi_global_config": {}
  }
}

Questions about iscsi_global_config