get_domain_auth_code

What get_domain_auth_code does on 20i MCP Server

AI agents call get_domain_auth_code to retrieve information from 20i MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_domain_auth_code is rated Low

Classified as Read because the tool's primary function is to retrieve existing data (EPP auth code) without creating, modifying, or deleting resources. Severity is medium rather than low because EPP auth codes are security-sensitive credentials that could enable unauthorized domain transfers if disclosed to an attacker, creating moderate blast radius.

From the tool's definition Tool retrieves domain EPP auth code via 'Get' operation. EPP (Extensible Provisioning Protocol) auth codes are sensitive credentials required for domain transfers, but the tool only reads/retrieves this information without modifying hosting infrastructure.

The rule that runs get_domain_auth_code safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 20i MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_domain_auth_code, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_domain_auth_code": {}
  }
}

Questions about get_domain_auth_code