update_firewall

What update_firewall does on Linode MCP Server

AI agents use update_firewall to create or update resources in Linode MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Linode MCP Server environment.

Why update_firewall is rated Medium

Updating firewall rules modifies network access controls and can significantly impact system security and connectivity. While reversible (rules can be changed back), misconfiguration could block critical traffic or expose resources. This qualifies as Write severity high due to the blast radius of incorrect firewall modifications affecting infrastructure availability and security posture.

From the tool's definition Tool name 'update_firewall' and description 'Update a firewall' indicate modification of firewall configuration rules. This is a reversible write operation that modifies network security settings but does not delete or destroy the firewall itself.

The rule that runs update_firewall safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Linode MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_firewall, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_firewall": {
      "limits": [
        {
          "counter": "update_firewall_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_firewall