// SCAN REPORT

MCP Dynamics 365 Commerce Server

326 tools. 115 can modify or destroy data without limits.

23 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

115 can modify or destroy data

211 read-only

326 tools total

Community server · catalogue entry verified 29/06/2026

How to control MCP Dynamics 365 Commerce Server ↓

TOOL MAP

What MCP Dynamics 365 Commerce Server exposes to your agents

Read (211) Write / Execute (92) Destructive / Financial (23)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous MCP Dynamics 365 Commerce Server tools

Financial · High loyaltycard_transfer_points Transferring loyalty points between accounts constitutes moving financial value/obligations. Financial · Critical cart_checkout Checking out a cart in an e-commerce system like Dynamics 365 Commerce finalizes a purchase, committing financial obligations (payment processing, order creation). Financial · High cart_issue_gift_card Issuing a gift card creates a financial instrument with real monetary value. Financial · High cart_refill_gift_card Adding balance to a gift card is a financial operation that moves monetary value onto a stored-value instrument.

115 of MCP Dynamics 365 Commerce Server's 326 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control MCP Dynamics 365 Commerce Server

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP Dynamics 365 Commerce Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "cart_cashout_gift_card": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "cart_delete_entity": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "appinfo_update_application_version": {
    "limits": [
      {
        "counter": "appinfo_update_application_version_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "address_get_address_purposes": {
    "limits": [
      {
        "counter": "address_get_address_purposes_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register MCP Dynamics 365 Commerce Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP DYNAMICS 365 COMMERCE →

Instant setup, no code required.

FULL CATALOGUE

All 326 MCP Dynamics 365 Commerce Server tools

FINANCIAL 6 tools

Financial cart_cashout_gift_card Cash out gift card Financial cart_checkout Checkout the cart Financial cart_issue_gift_card Issue gift card Financial cart_refill_gift_card Add balance to gift card Financial loyaltycard_redeem_points Redeem points from a loyalty card Financial loyaltycard_transfer_points Transfer points between loyalty cards

DESTRUCTIVE 17 tools

Destructive cart_delete_entity Delete cart entity Destructive cart_remove_cart_lines Remove cart lines Destructive example_delete_entity Delete an entity Destructive operations_void_suspended_transactions Void suspended transactions by cart ids. Destructive product_lists_delete_entity Delete product list. Destructive product_lists_remove_product_list_lines Removes lines from product list. Destructive products_remove_from_wishlist Remove from wishlist Destructive shifts_delete_shifts Delete shifts (not supported in online context) Destructive shifts_force_delete Forcefully delete a shift Destructive shifts_void_suspended_carts Void suspended transactions for a shift Destructive stock_count_journal_remove_journal Deletes the stock count journal from local. Destructive stock_count_journal_remove_transaction Deletes the stock count journal transaction from local. Destructive stock_count_remove_line_by_line_id Deletes the stock count line by line identifier. Destructive stock_count_remove_line_by_product_rec_id Deletes the stock count line by product identifier. Destructive tender_drop_create_transaction Performs saving tender drop and declare store operations. Destructive transfer_order_delete_entity Deletes specified transfer order. Destructive transfer_order_delete_transfer_order_lines Deletes transfer order lines.

EXECUTE 8 tools

Execute cart_recalculate_order Recalculate customer order Execute sales_orders_fulfillment_ship_fulfillment_lines Ship the fulfillment lines. Execute salesorder_checkin_for_order_pickup Check in for order pickup Execute shifts_blind_close Blind close a shift Execute shifts_resume Resume a shift Execute shifts_use Use an existing shift Execute stock_count_journal_commit Commits the list of stock journal transactions to HQ. Execute stock_count_journal_sync_transactions Syncs the Stock Count journal transactions and returns current list from DB.

WRITE 84 tools

Write appinfo_update_application_version Updates the POS device Write async_service_post_offline_transactions Posts offline transactions. Write async_service_update_download_session Update download session status. Write audit_event_register_and_get_audit_event Saves the audit event and returns it. Write audit_event_register_audit_event Performs the audit event saving operation. Write cart_add_cart_line_charge Add charge to cart line Write cart_add_cart_lines Add cart lines to cart Write cart_add_charge Add charge to cart Write cart_add_coupons Add coupons to cart Write cart_add_discount_code Add discount code Write cart_add_invoiced_sales_lines_to_cart Add invoiced sales lines to cart Write cart_add_invoices Add invoices to cart Write cart_add_order_invoice Add order invoice to cart Write cart_add_preprocessed_tender_line Add pre-processed tender line Write cart_add_tender_line Add tender line to cart Write cart_create_entity Create cart entity Write cart_merge_carts Merge multiple carts Write cart_override_cart_line_charge Override cart line charge Write cart_override_cart_line_price Override cart line price Write cart_override_charge Override charge amount Write cart_remove_coupons Remove coupons from cart Write cart_remove_discount_codes Remove discount codes Write cart_reset_all_charges Reset all charges Write cart_resume Resume suspended cart Write cart_resume_from_receipt_id Resume cart from receipt ID Write cart_suspend_with_journal Suspend cart with journal entry Write cart_update_cart_lines Update cart lines in cart Write cart_update_commission_sales_group Update commission sales group Write cart_update_delivery_specification Update delivery specification Write cart_update_entity Update cart entity Write cart_update_line_delivery_specifications Update line delivery specifications Write cart_update_tender_line_signature Update tender line signature Write customer_create_entity Create a new customer entity Write customer_group_assign_customer Assign customer to a group Write customer_post_nontransactional_activity_loyalty_points Post non-transactional activity loyalty points for a customer Write customer_update_entity Update an existing customer entity Write device_configuration_update_device_configuration Update device configuration settings Write example_create_entity Create a new entity Write example_update_entity Update an existing entity Write fulfillment_mark_lines_as_packed Marks lines as Packed. Write loyaltycard_block_loyalty_card Block or unblock a loyalty card Write loyaltycard_earn_points Add earned points to a loyalty card Write loyaltycard_issue_loyalty_card Issue a new loyalty card to a customer Write loyaltycard_update_loyalty_card Update loyalty card information Write non_sales_tender_create_transaction Creates non-sales transaction. Write notification_acknowledge_notifications Acknowledge notifications. Write product_lists_add_product_list_lines Creates product list lines. Write product_lists_copy_cart_to_product_list Copies cart content to product list lines. Write product_lists_create_entity Creates product list. Write product_lists_patch_entity Patch update product list. Write product_lists_update_entity Update product list. Write product_lists_update_product_list_lines Updates product list lines. Write products_add_to_wishlist Add product to wishlist Write products_create_product_review Create product review Write products_reserve_inventory Reserve product inventory Write publishing_set_online_channel_publish_status Updates Online Channel publishing status. Write purchase_order_commit Commits a purchase order. Write purchase_order_patch_entity Saves a purchase order to local database. Write sales_orders_fulfillment_accept_fulfillment_lines Accepts the fulfillment lines. Write sales_orders_fulfillment_mark_as_picked Updates status to Picked. Write sales_orders_fulfillment_pack_fulfillment_lines Updates status to Packed or Partially Packed. Write sales_orders_fulfillment_pick_fulfillment_lines Updates status to Picking. Write sales_orders_fulfillment_reject_fulfillment_lines Rejects fulfillment lines. Write salesorder_create_entity Upload a booked sales order with tender lines Write salesorder_create_packing_slip Create a packing slip Write salesorder_create_picking_list Create a picking list for a sales order (deprecated - use create_picking_list_for_items) Write salesorder_create_picking_list_for_items Create picking list for selected sales order lines Write salesorder_send_receipt Send transaction receipt to electronic addresses Write shift_reconciliation_lines_undo_reconciliation Undo reconciliation for groups in passed lines. Write shifts_close Close a shift Write shifts_open Open a new shift Write shifts_patch_shift Handle PATCH requests to update existing shift Write shifts_post_shift Handle POST requests to create new shift Write shifts_suspend Suspend a shift Write shifts_upsert_and_validate_shifts Insert or update and validate shifts Write stock_count_journal_patch_entity Partially updates journal entity. Write stock_count_journal_update_entity Updates journal entity. Write tender_types_round_amount_by_tender_type Round amount by tender type Write transfer_order_add_transfer_order_comment Adds transfer order comment. Write transfer_order_commit Commits a transfer order. Write transfer_order_create_entity Creates transfer order. Write transfer_order_create_transfer_order_lines Creates transfer order lines. Write transfer_order_patch_entity Saves transfer order to local DB. Write transfer_order_update_transfer_order_lines Updates transfer order lines.

READ 211 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about MCP Dynamics 365 Commerce Server

Can an AI agent move money through the MCP Dynamics 365 Commerce Server MCP server? +

Yes. The MCP Dynamics 365 Commerce Server server exposes 6 financial tools including cart_cashout_gift_card, cart_checkout, cart_issue_gift_card. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the MCP Dynamics 365 Commerce Server MCP server? +

Yes. The MCP Dynamics 365 Commerce Server server exposes 17 destructive tools including cart_delete_entity, cart_remove_cart_lines, example_delete_entity. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through MCP Dynamics 365 Commerce Server? +

The MCP Dynamics 365 Commerce Server server has 84 write tools including appinfo_update_application_version, async_service_post_offline_transactions, async_service_update_download_session. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach MCP Dynamics 365 Commerce Server.

How many tools does the MCP Dynamics 365 Commerce Server MCP server expose? +

326 tools across 4 categories: Destructive, Financial, Read, Write. 211 are read-only. 115 can modify, create, or delete data.

How do I enforce a policy on MCP Dynamics 365 Commerce Server? +

Register the MCP Dynamics 365 Commerce Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.