create-ruleset

Generate a ruleset in the Illumio PCE with defined scopes, labels, and ring-fencing patterns to manage security policies and control traffic flow effectively.

Instructions

Create a ruleset in the PCE with support for ring-fencing patterns

Input Schema

Name	Required	Description
`description`	No	Description of the ruleset (optional)
`name`	Yes	Name of the ruleset (e.g., 'RS-ELK'). Must be unique in the PCE.
`rules`	No
`scopes`	Yes	List of label combinations that define scopes. Each scope is an array of label values. This need to be label references like /orgs/1/labels/57 or similar. Get the label href from the get-labels tool.

Input Schema (JSON Schema)

{
  "properties": {
    "description": {
      "description": "Description of the ruleset (optional)",
      "type": "string"
    },
    "name": {
      "description": "Name of the ruleset (e.g., 'RS-ELK'). Must be unique in the PCE.",
      "type": "string"
    },
    "rules": {
      "items": {
        "properties": {
          "consumers": {
            "description": "Array of consumer labels, 'ams' for all workloads, or IP list references (e.g., 'iplist:Any (0.0.0.0/0)')",
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "ingress_services": {
            "items": {
              "properties": {
                "port": {
                  "type": "integer"
                },
                "proto": {
                  "type": "string"
                }
              },
              "required": [
                "port",
                "proto"
              ],
              "type": "object"
            },
            "type": "array"
          },
          "providers": {
            "description": "Array of provider labels, 'ams' for all workloads, or IP list references (e.g., 'iplist:Any (0.0.0.0/0)')",
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "unscoped_consumers": {
            "default": false,
            "description": "Whether to allow unscoped consumers (extra-scope rule)",
            "type": "boolean"
          }
        },
        "required": [
          "providers",
          "consumers",
          "ingress_services"
        ],
        "type": "object"
      },
      "type": "array"
    },
    "scopes": {
      "description": "List of label combinations that define scopes. Each scope is an array of label values. This need to be label references like /orgs/1/labels/57 or similar. Get the label href from the get-labels tool.",
      "items": {
        "items": {
          "type": "string"
        },
        "type": "array"
      },
      "type": "array"
    }
  },
  "required": [
    "name",
    "scopes"
  ],
  "type": "object"
}

Illumio MCP Server

create-ruleset

Instructions

Input Schema

Input Schema (JSON Schema)

Other Tools from Illumio MCP Server

Related Tools

MCP directory API