What can you do with the Fortinet FortiGate integration?

LiveContext exposes 17 operations on Fortinet FortiGate, covering firewall policy, address, address group and session. Common uses include removing a temporary rule added during an incident, seeing which networks a policy covers through a group and disabling a policy that is permitting unwanted traffic.

LiveContext

All integrations

Fortinet FortiGate integration

FortiGate firewall management API: read and edit firewall policies, address objects and address groups in the configuration tree, and read live device state such as system status, interfaces, routes, resource usage and active sessions from the monitor tree, including closing sessions that match a filter. This talks directly to a FortiGate appliance or virtual machine, so the management URL must be a publicly resolvable host reachable over HTTPS, with trusted hosts restricting who may reach it. Requests authenticate with a REST API administrator token.

17 toolsTokenAPI docs

Connect Fortinet FortiGate How integrations work

Common Fortinet FortiGate use cases

removing a temporary rule added during an incident
seeing which networks a policy covers through a group
disabling a policy that is permitting unwanted traffic
removing a network from a blocked group once it is cleared
adding a deny rule for a malicious network during an incident
auditing which policies permit traffic to a sensitive network
checking which gateway traffic to a network is actually using
verifying that credentials and host reach the intended device
cutting live connections to a malicious address during an incident
finding which policy is permitting traffic to a suspicious address

What you can do with Fortinet FortiGate

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Firewall policy, 5 operations

POSTcreate_firewall_policy
Adds a FortiGate firewall policy permitting or denying traffic between interfaces.
DELETEdelete_firewall_policy
Removes a FortiGate firewall policy.
GETget_firewall_policy
Returns a single FortiGate firewall policy.
GETlist_firewall_policies
Returns the FortiGate firewall policies in evaluation order.
PUTupdate_firewall_policy
Changes the settings of a FortiGate firewall policy, or moves it to a different position in the evaluation order.

Address, 4 operations

POSTcreate_firewall_address
Adds a FortiGate address object that policies can then reference by name.
DELETEdelete_firewall_address
Removes a FortiGate address object.
GETget_firewall_address
Returns a single FortiGate address object.
GETlist_firewall_addresses
Returns the FortiGate address objects that policies refer to by name.

Address group, 2 operations

GETlist_address_groups
Returns the FortiGate address groups and the address objects each one contains.
DELETEremove_address_group_member
Takes a single address object out of a FortiGate address group without rewriting the whole member list.

Session, 2 operations

POSTclose_sessions
Tears down live FortiGate sessions matching a source, destination, port and protocol filter.
GETlist_sessions
Returns the sessions currently passing through the FortiGate, with the policy each one matched.

System, 2 operations

GETget_resource_usage
Returns FortiGate resource usage over a chosen interval, such as processor, memory and session counts.
GETget_system_status
Returns FortiGate device status such as model, firmware version and serial number.

Interface, 1 operation

GETlist_interfaces
Returns live FortiGate interface state including link status and traffic counters.

Route, 1 operation

GETlist_routes
Returns the FortiGate routes that are currently installed and forwarding traffic.

Use Fortinet FortiGate from Claude Code, Cursor or Codex

Connect Fortinet FortiGate in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Fortinet FortiGate operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Fortinet FortiGate

Create your workspace
Sign up free. Nothing to install.
Connect Fortinet FortiGate once
Add your Fortinet FortiGate connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

Fortinet FortiGate integration FAQ

What can you do with the Fortinet FortiGate integration?: LiveContext exposes 17 operations on Fortinet FortiGate, covering firewall policy, address, address group and session. Common uses include removing a temporary rule added during an incident, seeing which networks a policy covers through a group and disabling a policy that is permitting unwanted traffic.