List Firewalla Boxes
firewalla_list_boxesList and audit Firewalla network security boxes to check online status, firmware versions, active devices, rules, and alarms for security monitoring.
Instructions
Discover the Firewalla boxes linked to this MSP account. This is the entry point for every audit — the returned gid is required by other tools.
Use this to answer:
"Is my box online and reporting in?"
"What firmware version is it running?"
"How many active devices, rules, alarms are there right now?"
Args:
group (string, optional): Filter to a specific group id.
response_format ('markdown' | 'json'): Output format (default: markdown).
Returns: { count: number, boxes: Array<{ gid: string, // box id — save this, other tools need it name: string, model: string, // e.g. "gold_plus" mode: string, // routing mode version: string, // firmware online: boolean, publicIP?: string, lastSeen?: number, // epoch seconds — not always populated license?: string, location?: string, deviceCount: number, ruleCount: number, alarmCount: number, // currently-active alarms group?: { id, name } }> }
Audit framing:
Offline box → can't observe current state; surface it.
High alarmCount → follow up with firewalla_search_alarms.
publicIP exposed unexpectedly → investigate with firewalla_search_flows.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| group | No | Filter to boxes in a specific group id. Omit to list all boxes on the account. | |
| response_format | No | Output format. 'markdown' (default) renders human-readable audit tables. 'json' returns structured data suitable for chaining into another tool call. | markdown |