grantpulse · Pulsenetwork MCP: Risk & Policy

WHAT IT DOES

What grantpulse does on Pulsenetwork

AI agents use grantpulse to commit financial operations through Pulsenetwork — usually the final step of a payment, billing, or trading workflow. A call moves real money.

PARAMETERS

Parameter	Type	Required	Description
`ein`	string	—	9-digit EIN. Usable alone (financials are EIN-indexed nationwide) or with state for BMF registration detail.
`days`	string	—	days
`lang`	string	—	lang
`size`	string	—	size
`state`	string	—	state
`action`	string	Yes	Which endpoint to call. Options: match \| federal \| state \| foundation \| eligibility \| apply \| deadline \| writer \| eu \| global \| org-intel \| funder-990
`agency`	string	—	agency
`sector`	string	—	arts \| health \| education \| environment \| technology \| agriculture \| community \| housing \| science
`country`	string	—	EU member state
`keyword`	string	—	keyword
`mission`	string	—	mission
`section`	string	—	section

Parameters from the server's own tool schema.

WHY IT NEEDS A POLICY

Why grantpulse needs a policy

Every invocation of this tool commits a financial transaction — paying USDC on Base mainnet per query. While the per-call amounts are small, an AI agent could invoke endpoints repeatedly, accumulating significant charges. The tool spans Read (grant discovery/intelligence) but the mandatory per-query financial obligation makes Financial the dominant and most severe category.

From the tool's definition All endpoints require x402 payment (USDC on Base mainnet); per-query costs ranging from $0.08 to $0.20 USDC per call; 'agents pay per query via x402 USDC on Base'

Risk signalsHigh parameter count (21 properties)

Attacks that exploit this kind of access

Questions about grantpulse

What does the grantpulse tool do? +

GrantPulse: Grant discovery and application intelligence API. 8 endpoints powered by Grants.gov, USASpending.gov, and Claude. All endpoints require x402 payment (USDC on Base mainnet). Flagship match endpoint inc Coverage: Global Endpoints: • match ($0.15): Personalized grant matching • federal ($0.10): Federal grant search • state ($0.10): State grant programs • foundation ($0.12): Foundation grant intelligence • eligibility ($0.10): Grant eligibility analysis • apply ($0.15): Grant application strategy • deadline ($0.08): Grant deadline tracker • writer ($0.20): Grant narrative drafting • eu ($0.12): EU funding intelligence • global ($0.15): Global development funding • org-intel ($0.20): Nonprofit financial intelligence (IRS Form 990) • funder-990 ($0.25): Private foundation giving intelligence (IRS Form 990-PF). It is categorised as a Financial tool in the Pulsenetwork MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

What parameters does grantpulse accept? +

grantpulse accepts 12 parameters: ein, days, lang, size, state, action, agency, sector, country, keyword, mission, section. Required: action. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on grantpulse? +

Register the Pulsenetwork MCP server in PolicyLayer and add a rule for grantpulse: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Pulsenetwork. Nothing to install.

What risk level is grantpulse? +

grantpulse is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit grantpulse? +

Yes. Add a rate_limit block to the grantpulse rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block grantpulse completely? +

Set action: deny in the PolicyLayer policy for grantpulse. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides grantpulse? +

grantpulse is provided by the Pulsenetwork MCP server (https://pulse.theaslangroupllc.com/api/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.