# list_sent_faxes

List faxes previously sent by the authenticated account (most recent first). Includes faxes sent via MCP, REST API, and the prepaid web form. Free anonymous sends are not included.

Agent View of the PolicyLayer registry record for `list_sent_faxes`. HTML page: https://policylayer.com/tools/com-gotfreefax-mcp/list-sent-faxes

## Facts

- Tool: `list_sent_faxes`
- Server: GotFreeFax (`https://www.gotfreefax.com/mcp`) — https://policylayer.com/tools/com-gotfreefax-mcp.md
- Homepage: https://github.com/vannet/gotfreefax-mcp
- Risk category: Read (Low risk)
- Registry record: grade D, identity unverified
- Server auth posture: open
- Server CORS policy: *
- Server rate-limited: no
- Parameters: 2
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `limit` | integer | no | Max records to return (1-100, default 20) |
| `offset` | integer | no | Skip first N records for pagination (default 0) |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "list_sent_faxes",
    "arguments": {}
  }
}
```

## Why list_sent_faxes is rated Low

This tool retrieves and queries existing fax history data without modifying, deleting, or executing any operations. It is a pure read operation with minimal blast radius—even if misused by an agent, it only exposes historical metadata about the account's past fax activity, not financial transactions or destructive operations.

From the tool's own definition: "Tool name 'list_sent_faxes' and description 'List faxes previously sent' indicate a retrieval operation with no side effects. The description explicitly states it queries historical data (faxes already sent)."

## Use case

AI agents call list_sent_faxes to retrieve information from GotFreeFax without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GotFreeFax:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_sent_faxes": {}
  }
}
```

## Other tools on GotFreeFax (6)

- `purchase_credits` — Financial — https://policylayer.com/tools/com-gotfreefax-mcp/purchase-credits.md
- `send_fax` — Financial — https://policylayer.com/tools/com-gotfreefax-mcp/send-fax.md
- `check_fax_status` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/check-fax-status.md
- `get_account_balance` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/get-account-balance.md
- `list_supported_formats` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/list-supported-formats.md
- `send_free_fax` — Write — https://policylayer.com/tools/com-gotfreefax-mcp/send-free-fax.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-gotfreefax-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-gotfreefax-mcp