update_firewall_settings

What update_firewall_settings does on Linode MCP Server

AI agents use update_firewall_settings to create or update resources in Linode MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Linode MCP Server environment.

Why update_firewall_settings is rated Medium

This tool modifies firewall configuration settings, which is a reversible write operation. However, the blast radius is high because incorrect firewall rules could expose or block critical infrastructure, deny legitimate traffic, or inadvertently allow malicious access. It is not Destructive (settings can be reverted), not Execute (does not run arbitrary code), and not Financial. Write is most appropriate.

From the tool's definition Tool name is 'update_firewall_settings' and description states 'Update default firewalls settings'. The 'update' verb indicates modification of existing configuration rather than deletion or execution of arbitrary commands.

The rule that runs update_firewall_settings safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Linode MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_firewall_settings, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_firewall_settings": {
      "limits": [
        {
          "counter": "update_firewall_settings_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_firewall_settings