growsurf_trigger_referral
Trigger referral credit for a referred participant (use when your trigger is Sign up + Qualifying Action). Optionally pass delayInDays (1-90) to hold the credit for N days before awarding it (e.g. to cover a refund window). Targets
This record as markdown: /tools/com-growsurf-growsurf/growsurf-trigger-referral.md
What growsurf_trigger_referral does on GrowSurf
AI agents invoke growsurf_trigger_referral to trigger actions in GrowSurf. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.
Why growsurf_trigger_referral is rated High
growsurf_trigger_referral triggers real processes with real consequences. An agent gone sideways doesn't fire it once. It starts dozens of builds, sends mass notifications, or burns through compute before anyone looks up.
Attacks that exploit this kind of access
The rule that runs growsurf_trigger_referral safely
PolicyLayer is an MCP gateway: it sits between your AI agents and GrowSurf, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For growsurf_trigger_referral, this is the rule to start with:
growsurf_trigger_referral stays usable, but rate-capped: a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.
The button opens the PolicyLayer dashboard: create your workspace, connect GrowSurf, apply this rule, and every growsurf_trigger_referral call is checked against it from then on.
Questions about growsurf_trigger_referral
Trigger referral credit for a referred participant (use when your trigger is Sign up + Qualifying Action). Optionally pass delayInDays (1-90) to hold the credit for N days before awarding it (e.g. to cover a refund window). Targets. It is categorised as a Execute tool in the GrowSurf MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.
Register the GrowSurf MCP server in PolicyLayer and add a rule for growsurf_trigger_referral: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches GrowSurf. Nothing to install.
growsurf_trigger_referral is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.
Yes. Add a rate_limit block to the growsurf_trigger_referral rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for growsurf_trigger_referral. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
growsurf_trigger_referral is provided by the GrowSurf MCP server (@growsurfteam/growsurf-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on GrowSurf, and thousands of servers like it.
Across the catalogue