Sage MCP Policy · 359 Tools

HOW TO CONTROL SAGE MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Sage MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "copilot_add_seats": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "claude_code_delete_invite": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "gmail_untrash_message": {
    "limits": [
      {
        "counter": "gmail_untrash_message_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "bitbucket_get_diff": {
    "limits": [
      {
        "counter": "bitbucket_get_diff_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Sage MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SAGE →

Free to start. No card required.

ALL 359 SAGE MCP TOOLS

FINANCIAL 2 tools

Financial copilot_add_seats Add Copilot seats for specified users in an organization Financial cursor_set_user_spend_limit Set a spending limit in USD for a specific team member

DESTRUCTIVE 17 tools

Destructive claude_code_delete_invite Delete a pending invitation Destructive claude_code_remove_user Remove a user from the organization Destructive codex_delete_user Remove a user from the organization Destructive confluence_delete_page Delete a Confluence page by ID Destructive copilot_remove_seats Remove Copilot seats for specified users in an organization Destructive cursor_remove_member Remove a member from the Cursor team by user ID Destructive discord_delete_message Delete a message from a channel Destructive excel_clear_range Clear the contents of a cell range in a worksheet (formatting is preserved) Destructive excel_delete_worksheet Delete a worksheet (tab) from a workbook Destructive google_sheets_clear_range Clear all values from a range of cells in a Google Sheets spreadsheet (formatting is preserved) Destructive google_sheets_delete_sheet Delete a sheet (tab) from a Google Sheets spreadsheet by its sheet ID Destructive google_slides_delete_slide Delete a slide from a presentation by its object ID Destructive outlook_delete_message Delete an email message. Moves to Deleted Items folder. Destructive powerpoint_delete_presentation Delete a PowerPoint presentation from OneDrive. This moves the file to the recycle bin. Destructive slack_reactions_remove Remove an emoji reaction from a message Destructive zoom_delete_meeting Delete a scheduled meeting Destructive gmail_trash_message Move a message to the trash

EXECUTE 3 tools

Execute bitbucket_trigger_pipeline Trigger a new pipeline run for a branch or commit Execute excel_run_formula Write a formula to a specific cell and return the computed result. The formula is written, the cell is read ba Execute gitlab_retry_pipeline Retry all failed jobs in a pipeline

WRITE 85 tools

Write gmail_untrash_message Remove a message from the trash Write excel_append_rows Append rows to an existing table in a workbook. Values are a 2D array of row data. Write gmail_forward_message Forward an existing email message to a new recipient Write gmail_reply_to_message Reply to an existing email message, preserving the thread Write google_docs_append_text Append text to the end of a Google Doc Write google_docs_create_document Create a new Google Doc with optional initial content Write google_docs_insert_text Insert text at a specific position in a Google Doc Write google_sheets_append_rows Append rows of data after the last row with content in a Google Sheets spreadsheet Write google_sheets_find_and_replace Find and replace text across a spreadsheet or within a specific sheet Write google_sheets_format_range Apply formatting to a range of cells (bold, italic, font size, background color, text color). Colors use RGB f Write google_slides_duplicate_slide Duplicate an existing slide in the presentation Write notion_append_block_children Append blocks (content) to a page Write outlook_flag_message Flag, unflag, or mark a message as complete. Flagged messages appear in the flagged email view. Write outlook_forward_message Forward an email message to one or more recipients with an optional comment. Write outlook_reply_to_message Reply to an email message. Can reply to sender only or reply all. Write teams_reply_to_message Reply to a specific message in a channel Write bitbucket_add_pr_comment Add a comment to a pull request Write bitbucket_create_issue Create a new issue in a Bitbucket repository (requires issue tracker to be enabled) Write bitbucket_create_pull_request Create a new pull request in a Bitbucket repository Write claude_code_add_workspace_member Add a member to a workspace Write claude_code_create_invite Invite a user to the organization Write claude_code_create_workspace Create a new workspace in the organization Write claude_code_update_api_key Update an API key Write claude_code_update_user_role Update a user Write codex_create_invite Invite a new user to the organization by email Write codex_create_project Create a new project in the organization Write codex_modify_user Modify a user Write confluence_add_comment Add a footer comment to a Confluence page. Body must be in Atlassian Storage Format. Write confluence_add_label Add a label to a Confluence page Write confluence_create_page Create a new page in a Confluence space. Body must be in Atlassian Storage Format (XHTML). Write confluence_update_page Update an existing Confluence page. Requires current version number (will be auto-incremented). Write discord_add_reaction Add a reaction emoji to a message Write discord_create_thread Create a new thread from an existing message Write discord_edit_message Edit an existing message in a channel Write discord_send_message Send a message to a channel Write excel_add_worksheet Add a new worksheet (tab) to an existing workbook Write excel_create_table Create a table in a worksheet from a cell range. The range defines the table boundaries including headers. Write excel_create_workbook Create a new empty Excel workbook (.xlsx) in the user Write excel_write_range Write values to a cell range in a worksheet. Values are a 2D array where each inner array is a row. Write github_create_issue Create a new issue in a repository Write github_update_issue Update an existing issue Write gitlab_add_mr_note Add a note (comment) to a merge request Write gitlab_create_issue Create a new issue in a project Write gitlab_create_merge_request Create a new merge request Write gitlab_update_issue Update an existing issue Write gmail_create_draft Create a draft email message Write gmail_create_label Create a new label in the user Write gmail_modify_labels Add or remove labels from a specific message Write gmail_send_message Send a new email message Write google_sheets_add_sheet Add a new sheet (tab) to an existing Google Sheets spreadsheet Write google_sheets_batch_update Execute one or more batch update requests on a spreadsheet. Supports any Sheets API batchUpdate request type ( Write google_sheets_create_spreadsheet Create a new Google Sheets spreadsheet with optional sheet names Write google_sheets_write_range Write values to a range of cells in a Google Sheets spreadsheet. Values are provided as a 2D array (list of ro Write google_slides_add_slide Add a new slide to a presentation at an optional position with a layout Write google_slides_add_text Insert text into a shape (text box) on a slide by its object ID Write google_slides_create_presentation Create a new Google Slides presentation with a title Write google_slides_replace_text Find and replace all occurrences of text across the entire presentation Write google_slides_update_speaker_notes Update the speaker notes for a specific slide Write jira_add_comment Add a comment to an issue Write jira_assign_issue Assign an issue to a user Write jira_create_issue Create a new Jira issue Write jira_transition_issue Transition an issue through workflow (e.g., move to Write jira_update_issue Update an existing Jira issue Write linear_add_comment Add a comment to a Linear issue Write linear_archive_issue Archive a Linear issue Write linear_create_issue Create a new Linear issue Write linear_create_project Create a new Linear project Write linear_update_issue Update an existing Linear issue Write notion_create_page Create a new page in a Notion database or as a child of another page Write notion_update_page Update a page Write outlook_create_draft Create a draft email message that can be edited and sent later. Write outlook_create_folder Create a new mail folder. Can create top-level folders or child folders within an existing folder. Write outlook_move_message Move an email message to a different mail folder. Write outlook_send_message Send a new email message. Supports HTML and text body content, with CC and BCC recipients. Write powerpoint_copy_presentation Copy a PowerPoint presentation to a new file, optionally in a different folder. Write powerpoint_create_presentation Create a new empty PowerPoint presentation on OneDrive. The filename should end with .pptx. Write powerpoint_move_presentation Move a PowerPoint presentation to a different OneDrive folder. Write powerpoint_upload_presentation Get the upload URL for updating an existing PowerPoint file. Binary file upload is not practical via MCP tool Write slack_conversations_add_message Post a message to a channel, private channel, or direct message Write slack_reactions_add Add an emoji reaction to a message Write teams_send_channel_message Send a message to a channel in a team Write teams_send_chat_message Send a message in a chat Write windsurf_set_usage_config Update Windsurf/Codeium usage configuration settings for the team Write zoom_create_meeting Create a new scheduled meeting Write zoom_update_meeting Update an existing meeting

READ 252 tools

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent move money through the Sage MCP server? +

Yes. The Sage MCP server exposes 2 financial tools including copilot_add_seats, cursor_set_user_spend_limit. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Sage MCP server? +

Yes. The Sage MCP server exposes 17 destructive tools including claude_code_delete_invite, claude_code_remove_user, codex_delete_user. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Sage MCP? +

The Sage MCP server has 85 write tools including gmail_untrash_message, excel_append_rows, gmail_forward_message. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Sage MCP.

How many tools does the Sage MCP server expose? +

359 tools across 4 categories: Destructive, Execute, Read, Write. 252 are read-only. 107 can modify, create, or delete data.

How do I enforce a policy on Sage MCP? +

Register the Sage MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Sage MCP

TOOL MAP

MOST DANGEROUS TOOLS

HOW TO CONTROL SAGE MCP

ALL 359 SAGE MCP TOOLS

RELATED SERVERS

FAQ

Enforce policy on every Sage MCP tool call.

Sage MCP

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL SAGE MCP

// ALL 359 SAGE MCP TOOLS

// RELATED SERVERS

// FAQ

Enforce policy on every Sage MCP tool call.

TOOL MAP

MOST DANGEROUS TOOLS

HOW TO CONTROL SAGE MCP

ALL 359 SAGE MCP TOOLS

RELATED SERVERS

FAQ