# evidence_create

Create a new record in any AbraFlexi evidence.

Agent View of the PolicyLayer registry record for `evidence_create`. HTML page: https://policylayer.com/tools/abraflexi/evidence-create

## Facts

- Tool: `evidence_create`
- Server: AbraFlexi (`abraflexi-mcp-server`) — https://policylayer.com/tools/abraflexi.md
- Install: `npx -y abraflexi-mcp-server`
- Homepage: https://github.com/VitexSoftware/abraflexi-mcp-server
- Risk category: Write (Medium risk)
- Registry record: grade F, identity verified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "evidence_create",
    "arguments": {}
  }
}
```

## Why evidence_create is rated Medium

This tool creates new records in an evidence system, which is a reversible write operation. It does not delete data (would be Destructive), does not move money (would be Financial), and does not execute arbitrary code (would be Execute). However, the ability to create records 'in any AbraFlexi evidence' suggests broad scope across potentially sensitive documentation systems, elevating severity from low to medium.

From the tool's own definition: "Tool name 'evidence_create' and description 'Create a new record in any AbraFlexi evidence' explicitly indicates creation of new records."

## Use case

AI agents use evidence_create to create or update resources in AbraFlexi, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your AbraFlexi environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches AbraFlexi:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "evidence_create": {
      "limits": [
        {
          "counter": "evidence_create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on AbraFlexi (20)

- `contact_delete` — Destructive — https://policylayer.com/tools/abraflexi/contact-delete.md
- `evidence_delete` — Destructive — https://policylayer.com/tools/abraflexi/evidence-delete.md
- `invoice_issued_delete` — Destructive — https://policylayer.com/tools/abraflexi/invoice-issued-delete.md
- `product_delete` — Destructive — https://policylayer.com/tools/abraflexi/product-delete.md
- `bank_transaction_create` — Financial — https://policylayer.com/tools/abraflexi/bank-transaction-create.md
- `bank_transaction_get` — Read — https://policylayer.com/tools/abraflexi/bank-transaction-get.md
- `contact_get` — Read — https://policylayer.com/tools/abraflexi/contact-get.md
- `evidence_get` — Read — https://policylayer.com/tools/abraflexi/evidence-get.md
- `evidence_list` — Read — https://policylayer.com/tools/abraflexi/evidence-list.md
- `invoice_issued_get` — Read — https://policylayer.com/tools/abraflexi/invoice-issued-get.md
- `invoice_received_get` — Read — https://policylayer.com/tools/abraflexi/invoice-received-get.md
- `product_get` — Read — https://policylayer.com/tools/abraflexi/product-get.md
- `contact_create` — Write — https://policylayer.com/tools/abraflexi/contact-create.md
- `contact_update` — Write — https://policylayer.com/tools/abraflexi/contact-update.md
- `evidence_update` — Write — https://policylayer.com/tools/abraflexi/evidence-update.md
- `invoice_issued_create` — Write — https://policylayer.com/tools/abraflexi/invoice-issued-create.md
- `invoice_issued_update` — Write — https://policylayer.com/tools/abraflexi/invoice-issued-update.md
- `invoice_received_create` — Write — https://policylayer.com/tools/abraflexi/invoice-received-create.md
- `product_create` — Write — https://policylayer.com/tools/abraflexi/product-create.md
- `product_update` — Write — https://policylayer.com/tools/abraflexi/product-update.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=abraflexi · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/abraflexi