# send_fax

Send a fax to a US or Canada phone number. Accepts PDF, DOC, DOCX, JPG, JPEG, TXT files (max 10) as base64-encoded content.

Agent View of the PolicyLayer registry record for `send_fax`. HTML page: https://policylayer.com/tools/com-gotfreefax-mcp/send-fax

## Facts

- Tool: `send_fax`
- Server: GotFreeFax (`https://www.gotfreefax.com/mcp`) — https://policylayer.com/tools/com-gotfreefax-mcp.md
- Homepage: https://github.com/vannet/gotfreefax-mcp
- Risk category: Financial (Critical risk)
- Registry record: grade D, identity unverified
- Server auth posture: open
- Server CORS policy: *
- Server rate-limited: no
- Parameters: 3 (2 required)
- Recommended policy verdict: Approval-gated

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `files` | array | yes | Array of files to fax |
| `fax_number` | string | yes | Destination fax number (10 digits, US or Canada) |
| `notify_url` | string | no | Optional URL to receive fax completion notification |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "send_fax",
    "arguments": {
      "files": [],
      "fax_number": "<fax_number>"
    }
  }
}
```

## Why send_fax is rated Critical

While the tool itself sends a fax, the server context makes clear this is a paid service where sending faxes consumes purchased credits. Misuse by an AI agent could result in unintended financial expenditure by consuming credits. The Financial category applies as it commits financial obligations (credit consumption) on behalf of the user.

From the tool's own definition: "Send a fax to a US or Canada phone number... GotFreeFax server description mentions 'free or paid faxes' and sibling tool 'purchase_credits' implies sending faxes can consume paid credits"

Risk signals: Accepts file system path (files[].filename) · Accepts raw HTML/template content (files[].content)

## Use case

AI agents use send_fax to commit financial operations through GotFreeFax, usually the final step of a payment, billing, or trading workflow. A call moves real money.

## Recommended policy (PolicyLayer)

Verdict: **Approval-gated**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GotFreeFax:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "send_fax": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}
```

## Other tools on GotFreeFax (6)

- `purchase_credits` — Financial — https://policylayer.com/tools/com-gotfreefax-mcp/purchase-credits.md
- `check_fax_status` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/check-fax-status.md
- `get_account_balance` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/get-account-balance.md
- `list_sent_faxes` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/list-sent-faxes.md
- `list_supported_formats` — Read — https://policylayer.com/tools/com-gotfreefax-mcp/list-supported-formats.md
- `send_free_fax` — Write — https://policylayer.com/tools/com-gotfreefax-mcp/send-free-fax.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-gotfreefax-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-gotfreefax-mcp