Skip to main content
Glama

scm_create_decryption_rule

Define decryption policy rules for network traffic in Palo Alto Networks Strata Cloud Manager. Specify source/destination zones, addresses, services, and actions (decrypt or no-decrypt) to control SSL/TLS inspection.

Instructions

Create a decryption policy rule.

Args: name: Unique name for the rule. folder: Folder to create the rule in. action: Decryption action — 'decrypt', 'no-decrypt'. source_zone: List of source zone names. destination_zone: List of destination zone names. source: Source address objects/groups (default ['any']). destination: Destination address objects/groups (default ['any']). service: List of service names (default ['any']). profile: Decryption profile name to apply (optional). description: Optional description. tag: Optional list of tag names. disabled: Whether the rule is disabled (default False). rulebase: Rulebase — 'pre' (default) or 'post'. tsg_id: Optional TSG ID or named alias. Defaults to SCM_TSG_ID.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYes
folderYes
actionYes
source_zoneYes
destination_zoneYes
sourceNo
destinationNo
serviceNo
profileNo
descriptionNo
tagNo
disabledNo
rulebaseNopre
tsg_idNo
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool creates a rule, implying a write operation, but fails to mention critical behavioral aspects such as required permissions, whether the rule is immediately active, potential side effects (e.g., impact on traffic), or error handling. This is a significant gap for a mutation tool with 14 parameters.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and appropriately sized. It front-loads the purpose in the first sentence, followed by a clear 'Args:' section listing each parameter with brief explanations. There is minimal waste, though some sentences could be more concise (e.g., merging default explanations).

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (14 parameters, no annotations, no output schema), the description is partially complete. It covers parameter semantics thoroughly but misses behavioral context (e.g., creation effects, error responses) and output details. For a creation tool with many parameters, this leaves gaps that could hinder effective use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, so the description must compensate. It provides detailed semantic explanations for all 14 parameters, including defaults (e.g., 'default ['any']', 'default False'), optional status, and enumerations (e.g., action options 'decrypt', 'no-decrypt'). This adds substantial value beyond the bare schema, though it lacks format examples or constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Create a decryption policy rule.' It specifies the verb ('Create') and resource ('decryption policy rule'), making the intent unambiguous. However, it does not explicitly differentiate this from sibling tools like 'scm_create_decryption_profile' or 'scm_create_security_rule', which could cause confusion in selection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It lacks context about prerequisites (e.g., needing a decryption profile first), exclusions, or comparisons to sibling tools like 'scm_update_decryption_rule' or 'scm_delete_decryption_rule'. This absence leaves the agent without usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ReverseThrottle/scm-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server