Integration

Fortinet FortiGate integration

FortiGate firewall management API: read and edit firewall policies, address objects and address groups in the configuration tree, and read live device state such as system status, interfaces, routes, resource usage and active sessions from the monitor tree, including closing sessions that match a filter. This talks directly to a FortiGate appliance or virtual machine, so the management URL must be a publicly resolvable host reachable over HTTPS, with trusted hosts restricting who may reach it. Requests authenticate with a REST API administrator token.

Connect Fortinet FortiGate How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Fortinet FortiGate.Built from the 17 Fortinet FortiGate tools below, on the connection you add once.

Common Fortinet FortiGate use cases

removing a temporary rule added during an incident
seeing which networks a policy covers through a group
disabling a policy that is permitting unwanted traffic
removing a network from a blocked group once it is cleared
adding a deny rule for a malicious network during an incident
auditing which policies permit traffic to a sensitive network
checking which gateway traffic to a network is actually using
verifying that credentials and host reach the intended device
cutting live connections to a malicious address during an incident
finding which policy is permitting traffic to a suspicious address

What you can do with Fortinet FortiGate

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Firewall policy, 5 operations

create_firewall_policyCreate firewall policyPOSTAdds a FortiGate firewall policy permitting or denying traffic between interfaces.
delete_firewall_policyDelete firewall policyDELETERemoves a FortiGate firewall policy.
get_firewall_policyGet firewall policyGETReturns a single FortiGate firewall policy.
list_firewall_policiesList firewall policiesGETReturns the FortiGate firewall policies in evaluation order.
update_firewall_policyUpdate firewall policyPUTChanges the settings of a FortiGate firewall policy, or moves it to a different position in the evaluation order.

Address, 4 operations

create_firewall_addressCreate firewall addressPOSTAdds a FortiGate address object that policies can then reference by name.
delete_firewall_addressDelete firewall addressDELETERemoves a FortiGate address object.
get_firewall_addressGet firewall addressGETReturns a single FortiGate address object.
list_firewall_addressesList firewall addressesGETReturns the FortiGate address objects that policies refer to by name.

Address group, 2 operations

list_address_groupsList address groupsGETReturns the FortiGate address groups and the address objects each one contains.
remove_address_group_memberRemove address group memberDELETETakes a single address object out of a FortiGate address group without rewriting the whole member list.

Session, 2 operations

close_sessionsClose sessionsPOSTTears down live FortiGate sessions matching a source, destination, port and protocol filter.
list_sessionsList sessionsGETReturns the sessions currently passing through the FortiGate, with the policy each one matched.

System, 2 operations

get_resource_usageGet resource usageGETReturns FortiGate resource usage over a chosen interval, such as processor, memory and session counts.
get_system_statusGet system statusGETReturns FortiGate device status such as model, firmware version and serial number.

Interface, 1 operation

list_interfacesList interfacesGETReturns live FortiGate interface state including link status and traffic counters.

Route, 1 operation

list_routesList routesGETReturns the FortiGate routes that are currently installed and forwarding traffic.

Use Fortinet FortiGate from Claude Code, Cursor or Codex

Connect Fortinet FortiGate in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Fortinet FortiGate operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Fortinet FortiGate

Create your workspace
Sign up free. Nothing to install.
Connect Fortinet FortiGate once
Add your Fortinet FortiGate connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

Fortinet FortiGate integration FAQ

What can you do with the Fortinet FortiGate integration?

LiveContext exposes 17 operations on Fortinet FortiGate, covering firewall policy, address, address group and session. Common uses include removing a temporary rule added during an incident, seeing which networks a policy covers through a group and disabling a policy that is permitting unwanted traffic.