list_transactions

What list_transactions does on Businys

AI agents call list_transactions to retrieve information from Businys without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_transactions is rated Low

Although this tool exposes sensitive financial data (payments, charges, refunds), it performs only a read operation—retrieving historical transaction records. It does not move money, create charges, or execute financial operations. However, severity is high because unauthorized access to complete transaction histories could enable fraud detection evasion, customer doxing, or business intelligence theft.

From the tool's definition Tool name is 'list_transactions' with description stating it provides 'Unified history of all money movement: invoice payments, checkout purchases, recurring charges, refunds, and deposit forfeitures.' The verb 'list' and 'history' indicate retrieval/querying…

The rule that runs list_transactions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Businys, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_transactions, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_transactions": {}
  }
}

Questions about list_transactions