despezzas_update_credit_card

What despezzas_update_credit_card does on Despezzas

AI agents use despezzas_update_credit_card to create or update resources in Despezzas, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Despezzas environment.

Why despezzas_update_credit_card is rated Medium

This tool modifies credit card data, which is a Write operation. However, given the financial context (it's a financial management tool - Despezzas is a personal finance app) and the sensitivity of credit card information, the severity is elevated to 'high' rather than 'medium'. The confirm=true requirement provides some mitigation, reducing severity from 'critical'.

From the tool's definition Tool description states 'Edita cartão manual' (edits credit card manually). The verb 'edita' (edit/modify) indicates data modification. The requirement 'Exige confirm=true' (requires confirm=true) shows safety controls are in place.

The rule that runs despezzas_update_credit_card safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Despezzas, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For despezzas_update_credit_card, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "despezzas_update_credit_card": {
      "limits": [
        {
          "counter": "despezzas_update_credit_card_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about despezzas_update_credit_card