// SCAN REPORT

Filevine

147 tools. 75 can modify or destroy data without limits.

20 destructive tools with no built-in limits. Policy required.

Last updated:

75 can modify or destroy data
72 read-only
147 tools total

Community server · catalogue entry verified 29/06/2026

How to control Filevine ↓

TOOL MAP

What Filevine exposes to your agents

Read (72) Write / Execute (55) Destructive / Financial (20)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Filevine tools

Financial · Critical create_payment This tool directly commits financial obligations by recording payments, which is irreversible and affects financial accounts. Financial · High create_payment_and_apply This tool creates payment records and applies them to invoices, which constitutes a financial transaction. Financial · High finalize_invoice Finalizing an invoice commits a financial obligation—it locks in charges and typically triggers billing workflows or payment collection. Financial · High approve_invoice Approving an invoice is a financial action that authorizes payment and creates or confirms a financial obligation.

75 of Filevine's 147 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Filevine

PolicyLayer is an MCP gateway — it sits between your AI agents and Filevine, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "approve_invoice": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "archive_project": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_contact_to_project": {
    "limits": [
      {
        "counter": "add_contact_to_project_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "batch_download_documents": {
    "limits": [
      {
        "counter": "batch_download_documents_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Filevine — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON FILEVINE →

Instant setup, no code required.

FULL CATALOGUE

All 147 Filevine tools

FINANCIAL 7 tools
Financial approve_invoice Approve an invoice. Financial create_billing_item Create a billing item (time entry or expense) on a project. Financial create_invoice Create an invoice for a project. fields_json is a JSON object. Financial create_payment Record a payment on a project. Financial create_payment_and_apply Record a payment and apply it to an invoice. Financial finalize_invoice Finalize an invoice on a project. Financial update_invoice Update an invoice on a project.
DESTRUCTIVE 13 tools
Destructive archive_project Archive (soft-delete) a project. Destructive delete_billing_item Delete a billing item. Destructive delete_collection_item Delete an item from a custom collection section. Destructive delete_document Delete a document. Destructive delete_folder Delete a document folder. Destructive delete_invoice Delete an invoice from a project. Destructive delete_project_deadline Delete a deadline from a project. Destructive delete_share_link Delete a share link. Destructive delete_task Delete a task. Destructive delete_team Delete a team. Destructive delete_webhook_subscription Delete a webhook subscription. Destructive remove_contact_from_project Remove a contact from a project. Destructive remove_tag_from_notes Remove a tag from all notes that have it.
WRITE 55 tools
Write add_contact_to_project Add a contact to a project with an optional role. Write add_document_revision Add a new revision to a document. Write add_document_to_project Associate a document with a project. Write add_email_to_project Add an email record to a project. Write add_team_member_to_project Add a team member to a project. fields_json is a JSON object with userId, role, etc. Write assign_task Assign a task to a user. Write batch_upload_documents Initiate a batch document upload. fields_json is a JSON object with upload details. Write complete_task Mark a task as complete. Write confirm_batch_upload Confirm a batch document upload. fields_json is a JSON object. Write copy_documents Copy documents to a folder. document_ids_csv is a comma-separated list of document IDs. Write create_collection_item Create an item in a custom collection section. fields_json is a JSON object. Write create_contact Create a new contact. Write create_document Create a new document record. Write create_folder Create a new document folder. Write create_hashtag Create a hashtag for use in notes and tasks. hashtag is the tag name (without ). Write create_mailroom_item Add an item to the mailroom. fields_json is a JSON object. Write create_note Create a new note. Write create_note_comment Add a comment to a note. Write create_project Create a new project. Use fields_json for additional fields as a JSON object. Write create_project_appointment Create an appointment on a project. Write create_project_deadline Create a deadline on a project. Write create_share_link Create a document share link. fields_json is a JSON object. Write create_task Create a new task. Write create_team Create a new team. Write create_webhook_subscription Create a webhook subscription for a Filevine event. Write incomplete_task Mark a completed task as incomplete. Write lock_document Lock a document to prevent editing. Write mark_invoice_sent Mark an invoice as sent. Write move_documents Move documents to a folder. document_ids_csv is a comma-separated list of document IDs. Write pin_note Pin a note. Write pin_note_to_project Pin a note to a project. Write pin_task Pin a task. Write remove_project_team_member Remove a team member from a project. Write remove_tag_from_contacts Remove a tag from all contacts that have it. Write remove_tag_from_documents Remove a tag from all documents that have it. Write set_project_rate_schedule Set the rate schedule for a project. Write snooze_task Snooze a task until a future date (ISO 8601 format). Write unlock_document Unlock a document to allow editing. Write unpin_note Unpin a note. Write unpin_note_from_project Unpin a note from a project. Write unpin_task Unpin a task. Write update_billing_item Update a billing item on a project. Write update_collection_item Update an item in a custom collection section. fields_json is a JSON object. Write update_contact Update a contact. Write update_document Update a document's metadata. Write update_folder Update a document folder. Write update_note Update a note. Write update_note_comment Update a comment on a note. Write update_project Update a project. Use fields_json for additional fields as a JSON object. Write update_project_contact Update a contact's role or attributes on a project. Write update_project_deadline Update a deadline on a project. Write update_project_form Update a custom form section on a project. fields_json is a JSON object of field values. Write update_project_team_member Update a team member's role on a project. Write update_task Update a task. Write update_webhook_subscription Update a webhook subscription.
READ 72 tools
Read batch_download_documents Request a batch download of documents. document_ids_csv is comma-separated document IDs. Read get_billing_item Get a specific billing item on a project. Read get_collection_item Get a single item from a custom collection section. Read get_contact Get a contact by ID. Read get_contact_addresses Get all addresses for a contact. Read get_contact_emails Get all email addresses for a contact. Read get_contact_phones Get all phone numbers for a contact. Read get_contact_projects Get all projects associated with a contact. Read get_countries Get the list of available countries for contact addresses. Read get_current_user Get the currently authenticated user (me). Read get_document Get a document by ID. Read get_document_download_locator Get the download URL/locator for a document. Read get_document_series Get a document series template by ID. Read get_folder Get a folder by ID. Read get_invoice_pdf Get the PDF download URL for an invoice. Read get_note Get a note by ID. Read get_note_comment Get a specific comment on a note. Read get_org_billing_codes Get all available billing codes for the organisation. Read get_org_billing_settings Get the organisation's billing settings. Read get_org_rate_schedules Get all rate schedules for the organisation. Read get_payment_link Get the online payment link for a project. Read get_project Get a project by ID. Read get_project_billing_codes Get available billing codes for a project. Read get_project_billing_settings Get billing settings for a project. Read get_project_billing_vitals Get billing vitals (summary) for a project. Read get_project_contacts Get all contacts associated with a project. Read get_project_deadline Get a specific deadline on a project. Read get_project_form Get a custom form section on a project by selector name. Read get_project_fund_transactions Get trust/retainer fund transaction history for a project. Read get_project_funds Get trust/retainer fund balances for a project. Read get_project_invoices Get all invoices for a project. Read get_project_team Get the team members assigned to a project. Read get_project_team_member Get a specific team member on a project. Read get_project_transactions Get all billing transactions for a project. Read get_project_type Get a specific project type by ID. Read get_project_vitals Get the vitals (key fields) for a project. Read get_report Get a specific report by ID. Read get_share_link Get a specific share link. Read get_task Get a task by ID. Read get_team Get a team by ID. Read get_user Get a user by ID. Read get_user_appointments Get appointments for a user. Read get_user_project_access Get the list of projects a user has access to. Read get_user_recent_projects Get recently accessed projects for a user. Read get_user_tasks Get tasks assigned to a user. Read get_webhook_subscription Get a specific webhook subscription. Read list_classifications List all document classification categories. Read list_collection_items List items in a custom collection section of a project. Read list_contacts List all contacts. Read list_document_series List all document series templates. Read list_documents List all documents. Read list_folders List all document folders. Read list_mailroom List all items in the mailroom. Read list_note_comments List all comments on a note. Read list_notes List all notes across all projects. Read list_project_appointments List all appointments for a project. Read list_project_deadlines List all deadlines for a project. Read list_project_emails List emails associated with a project. Read list_project_notes List all notes on a project. Read list_project_tasks List all tasks on a specific project. Read list_project_teams List all teams assigned to a project. Read list_project_types List all project (matter) types configured in the organisation. Read list_projects List all projects (matters). Read list_recently_opened_documents List recently opened documents for the current user. Read list_reports List all available reports. Read list_share_links List all document share links. Read list_tasks List all tasks across all projects. Read list_teams List all teams in the organisation. Read list_users List all users in the organisation. Read list_webhook_events List all available webhook event types. Read list_webhook_subscriptions List all active webhook subscriptions. Read search_documents Search documents by query string.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
paymentsadmin
Binance MCP Server 734 tools
paymentsadmin
GoHighLevel MCP Server 566 tools
paymentsadmin
GoCreative Agent API 546 tools
paymentsadmin
Claude Flow 454 tools
paymentsadmin
ServiceTitan MCP Server 454 tools
paymentsadmin
CloudStack MCP Server 442 tools
paymentsadmin
Integrations MCP 420 tools
paymentsadmin
FAQ

Questions about Filevine

Can an AI agent move money through the Filevine MCP server? +

Yes. The Filevine server exposes 7 financial tools including approve_invoice, create_billing_item, create_invoice. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Filevine MCP server? +

Yes. The Filevine server exposes 13 destructive tools including archive_project, delete_billing_item, delete_collection_item. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Filevine? +

The Filevine server has 55 write tools including add_contact_to_project, add_document_revision, add_document_to_project. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Filevine.

How many tools does the Filevine MCP server expose? +

147 tools across 4 categories: Destructive, Financial, Read, Write. 72 are read-only. 75 can modify, create, or delete data.

How do I enforce a policy on Filevine? +

Register the Filevine MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Filevine tool call.

Deterministic rules across all 147 Filevine tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FILEVINE →

Instant setup, no code required.

147 Filevine tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.