# list_organisations

List the Xero organisations connected to the authenticated Boxkite account.

Agent View of the PolicyLayer registry record for `list_organisations`. HTML page: https://policylayer.com/tools/com-getboxkite-xero-backup-export/list-organisations

## Facts

- Tool: `list_organisations`
- Server: Boxkite — Xero Backup & Export (`https://app.getboxkite.com/mcp`) — https://policylayer.com/tools/com-getboxkite-xero-backup-export.md
- Homepage: https://github.com/https://app.getboxkite.com/mcp
- Risk category: Read (Low risk)
- Registry record: grade D, identity unverified
- Server auth posture: open
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "list_organisations",
    "arguments": {}
  }
}
```

## Why list_organisations is rated Low

This tool retrieves metadata about connected Xero organisations without modifying any data. It is a pure query operation with no side effects. Severity is medium rather than low because exposure of financial accounting system metadata (organisation names, connection status) could enable social engineering or targeting of specific companies, though the data itself is not financial transactions.

From the tool's own definition: "Tool description states 'List the Xero organisations' which is a retrieval operation. The server is described as 'Complete read-only backup and export', confirming no modifications occur. Tool name uses 'list' which is a classic Read operation pattern."

## Use case

AI agents call list_organisations to retrieve information from Boxkite — Xero Backup & Export without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Boxkite — Xero Backup & Export:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_organisations": {}
  }
}
```

## Other tools on Boxkite — Xero Backup & Export (6)

- `start_export` — Financial — https://policylayer.com/tools/com-getboxkite-xero-backup-export/start-export.md
- `get_download_url` — Read — https://policylayer.com/tools/com-getboxkite-xero-backup-export/get-download-url.md
- `get_export_manifest` — Read — https://policylayer.com/tools/com-getboxkite-xero-backup-export/get-export-manifest.md
- `get_export_mapping` — Read — https://policylayer.com/tools/com-getboxkite-xero-backup-export/get-export-mapping.md
- `get_export_status` — Read — https://policylayer.com/tools/com-getboxkite-xero-backup-export/get-export-status.md
- `list_exports` — Read — https://policylayer.com/tools/com-getboxkite-xero-backup-export/list-exports.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-getboxkite-xero-backup-export · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-getboxkite-xero-backup-export