High-risk tools in Mcp Afip
48 of the 1300 tools in Mcp Afip are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
ship_orderExecuteArrange shipment for an order — either request pickup, drop off, or pass a tracking number depending on the logistics channel.
-
backchannel_startExecuteStart a CIBA / OTP pre-authorization for a shopper. Sends a push to Nubank app (CIBA) or triggers an OTP SMS. Returns an auth_req_id/ticket to complete later.
-
execute_studio_flowExecuteTrigger a Studio Flow Execution for a contact. Studio flows are visual IVR / workflow builders — this kicks one off for a specific To/From pair.
-
fraud_screenExecuteRun a standalone FraudSight assessment on a payment method (no authorization). Returns a score and recommendation.
-
initiate_transactionExecuteStart a new KYC workflow execution on an existing account. Returns a
-
restart_instanceExecuteRestart an instance
-
run_reportExecuteCreate and run a standalone Persona report — not tied to an inquiry flow. Use for ad-hoc watchlist screening, adverse media, business (KYB) lookups, address verification, or pro...
-
sign_buy_urlExecuteBuild and HMAC-SHA256 sign a MoonPay buy widget URL (buy.moonpay.com). Returns a ready-to-redirect URL with the merchant
-
sign_sell_urlExecuteBuild and HMAC-SHA256 sign a MoonPay sell widget URL (sell.moonpay.com). Returns a ready-to-redirect URL with apiKey + signature appended. Requires MOONPAY_PUBLISHABLE_KEY and M...
-
start_verificationExecuteStart a Verify (2FA) challenge. Sends a one-time code to
-
trust_platform_startExecuteStart a Trust Platform onboarding flow — orchestrated pipeline chaining person/company checks + biometrics + document validation per a dashboard template. Returns flow_id + host...
-
finalize_disputeExecuteFinalize a dispute via finalizeDispute — submits previously added evidence to the card network for review. After finalization, no further evidence can be added.
-
send_invoiceExecuteEmail an invoice to one or more recipients
-
authenticate_3dsExecuteComplete a 3-D Secure challenge. Call after the payer finishes the issuer challenge (redirected back to return_url) with the authenticator response (cres / PaRes). Returns the a...
-
backchannel_resend_otpExecuteResend the OTP to the shopper for an in-flight authorization ticket.
-
challenge_3dsExecuteStep 3 of 3DS2 — post the CReq back after the issuer challenge window closes, to retrieve the final authentication outcome.
-
check_verificationExecuteCheck a Verify (2FA) code against a Service SID. Returns status=approved when the code matches.
-
evaluate_orderExecuteSubmit an order to Legiti for real-time fraud evaluation via the v2 order endpoint. Returns a decision (approve / reject / manual) synchronously — response may take up to ~20s. ...
-
exchange_tokenExecuteExchange an authorization_code or refresh_token at POST /v1/token. Expects an already-signed JWT client_assertion. Returns access_token (5 min) + refresh_token for recurrence. A...
-
face_authenticationExecuteFace authentication against a base image (typically the document photo). Returns match_score + liveness verdict + spoofing indicators. POST /v1/biometrics/face.
-
leave_groupExecuteLeave a WhatsApp group
-
lookup_3dsExecuteStep 1 of 3DS2 — submit device-data-collection (DDC) output to Worldpay to determine whether a challenge is required. Returns either a frictionless result or a challenge lookup ...
-
make_callExecutePlace an outbound voice call. Twilio fetches TwiML from
-
request_key_portabilityExecuteRequest portability of a Pix key from another PSP into this PSP (DICT portability flow)
-
retry_transactionExecuteRetry a failed, expired, or rejected workflow execution. Creates a new workflow execution on the same account, optionally re-using the original workflow definition and customer ...
-
verify_payment_methodExecuteRun a credit-card verification (zero-auth or $1 auth) on a tokenized payment method via verifyPaymentMethod. Returns a CreditCardVerification with status and processor response....
-
apply_decision_to_sessionExecuteApply a workflow Decision to a session (POST /v3/accounts/{account_id}/users/{user_id}/sessions/{session_id}/decisions). Session-level decisions target a specific authenticated ...
-
backchannel_completeExecuteComplete a CIBA/OTP flow by submitting the OTP the shopper received. Returns the access_token once validated.
-
create_antifraud_analysisExecuteSubmit a standalone Antifraud analysis (POST /fraudanalysis) through Braspag
-
create_checkExecuteRun a verification check on an applicant. A check is a bundle of one or more reports (document, facial_similarity_photo, watchlist, etc). This is the step that actually triggers...
-
create_sessionExecuteCreate a Checkout session (used by Drop-in and Web Components to load methods + handle the full flow client-side).
-
create_workflow_runExecuteStart an Onfido Studio workflow run. Studio is Onfido
-
create_zero_authExecuteZero-dollar authorization / card validation (POST /zeroauth). Braspag routes a $0 (or minimum-amount) authorization through the acquirer to confirm the card is live and not bloc...
-
issue_challengeExecuteIssue an authentication challenge (OTP via SMS/email or KBA question) to a buyer. Use as a step-up after EM_ANALISE or for high-risk flows.
-
request_verification_codeExecuteRequest Meta to send a verification code to the configured phone number via SMS or voice. Use before verify_code.
-
resume_inquiryExecuteResume a paused inquiry — returns a fresh one-time session token / link so the end user can continue a flow that was abandoned or needs additional steps (e.g. after a
-
send_button_actionsExecuteSend interactive action buttons (CALL, URL, REPLY). Do not mix REPLY with CALL/URL in the same message.
-
send_content_statusExecuteSend a $content_status event to Sift
-
send_custom_eventExecuteSend a custom (merchant-defined) event to Sift
-
send_loginExecuteSend a $login event to Sift
-
send_logoutExecuteSend a $logout event to Sift
-
send_option_listExecuteSend an interactive option list (WhatsApp native list). Does NOT work in groups.
-
send_order_for_analysisExecuteSubmit an order to ClearSale for fraud analysis. Returns a score (0-100) and a decision (APROVADO / REPROVADO / EM_ANALISE). Include as much signal as possible — billing + shipp...
-
send_smsExecuteSend an SMS message
-
send_textExecuteSend a text message via WhatsApp
-
send_typing_indicatorExecuteShow a typing indicator on a received message. Also marks the message as read. Indicator auto-clears after ~25s or when you reply.
-
send_voiceExecuteSend a voice message via TTS or pre-recorded audio URL
-
send_whatsappExecuteSend a WhatsApp message
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.