List Firewalla Devices
firewalla_list_devicesList all devices tracked by Firewalla to identify unknown devices, monitor network activity, and audit security configurations for potential risks.
Instructions
Inventory every device Firewalla tracks — the "who's on my network right now" primitive.
Use this to answer:
"Are there any unknown/rogue devices on my network?"
"Which devices aren't being monitored?"
"What's the MAC vendor breakdown across my network?"
"Any router-class devices I didn't expect?"
Args:
box (string, optional): Filter to devices on a specific box gid.
online_only (boolean, optional): Drop offline devices client-side.
response_format ('markdown' | 'json'): Output format (default: markdown).
Returns: { count: number, // devices after client-side filtering total: number, // devices returned by the API (pre-filter) devices: Array<{ id: string, // typically MAC gid: string, // box the device is attached to name: string, ip: string, mac?: string, macVendor?: string, ipReserved?: boolean, online: boolean, network?: { id, name }, deviceType?: string, // e.g. "phone", "computer", "iot" isRouter?: boolean, isFirewalla?: boolean, monitoring?: boolean, // false = device excluded from monitoring totalDownload?: number, // bytes (lifetime) totalUpload?: number }> }
Audit framing:
Unknown macVendor → possible squatter or spoofed MAC.
monitoring=false → device is excluded from Firewalla's visibility; review whether that's intentional.
Unexpected isRouter=true → shadow router on the LAN.
ipReserved=false on a server that should have a static lease → risk of address drift.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| box | No | Filter to devices attached to a specific box gid. | |
| online_only | No | If true, drop offline devices from the response. Client-side filter — the API returns all devices either way. | |
| response_format | No | Output format. 'markdown' (default) renders human-readable audit tables. 'json' returns structured data suitable for chaining into another tool call. | markdown |