evidence_attach_file

What evidence_attach_file does on AbraFlexi

AI agents use evidence_attach_file to create or update resources in AbraFlexi, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your AbraFlexi environment.

Why evidence_attach_file is rated Medium

The name 'evidence_attach_file' most directly implies a Write operation—creating or modifying a record by attaching a file. Without a description, confidence is moderate. The blast radius is medium because attachment to evidence records could have downstream effects on audit trails or legal proceedings, but the operation itself is reversible (file can typically be detached/replaced).

From the tool's definition Tool name 'evidence_attach_file' indicates attaching/uploading a file to evidence; description is empty. Sibling tools include financial operations (bank_transaction_create) and destructive operations (contact_delete), suggesting this server handles critical…

The rule that runs evidence_attach_file safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AbraFlexi, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For evidence_attach_file, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "evidence_attach_file": {
      "limits": [
        {
          "counter": "evidence_attach_file_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about evidence_attach_file