dynadot_get_transfer_auth_code

What dynadot_get_transfer_auth_code does on Dynadot

AI agents call dynadot_get_transfer_auth_code to retrieve information from Dynadot without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why dynadot_get_transfer_auth_code is rated Low

While this tool only retrieves data without modifying it, making it categorically a Read operation, the severity is elevated to 'medium' rather than 'low' because the EPP code is sensitive authentication material. Unauthorized retrieval of EPP codes could enable domain theft or unauthorized transfers if an AI agent misuses this tool with insufficient authorization checks.

From the tool's definition Tool description states 'Retrieve the authorization (EPP) code for transferring a domain away.' The verb 'Retrieve' and the read-only nature of obtaining an EPP code (no data is modified or deleted) clearly indicate this is a Read operation.

The rule that runs dynadot_get_transfer_auth_code safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Dynadot, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For dynadot_get_transfer_auth_code, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "dynadot_get_transfer_auth_code": {}
  }
}

Questions about dynadot_get_transfer_auth_code