# 1ly_call

Call a paid API on 1ly.store with automatic x402 payment. Returns the API response and purchase metadata for leaving a review.

Agent View of the PolicyLayer registry record for `1ly_call`. HTML page: https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-call

## Facts

- Tool: `1ly_call`
- Server: 1ly (`@1ly/mcp-server`) — https://policylayer.com/tools/io-github-1lystore-mcp-server.md
- Install: `npx -y @1ly/mcp-server`
- Homepage: https://github.com/1lystore/1ly-mcp-server
- Risk category: Financial (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Approval-gated

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "1ly_call",
    "arguments": {}
  }
}
```

## Why 1ly_call is rated Critical

The tool explicitly performs automatic payment processing ('automatic x402 payment') when calling a paid API. This constitutes a financial transaction — it commits real funds (USDC or $1LY based on the server context) without requiring additional confirmation. An AI agent misusing this tool could trigger repeated or unintended financial transactions, making the blast radius critical.

From the tool's own definition: "Call a paid API on 1ly.store with automatic x402 payment"

## Use case

AI agents use 1ly_call to commit financial operations through 1ly, usually the final step of a payment, billing, or trading workflow. A call moves real money.

## Recommended policy (PolicyLayer)

Verdict: **Approval-gated**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches 1ly:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "1ly_call": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}
```

## Other tools on 1ly (23)

- `1ly_delete_link` — Destructive — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-delete-link.md
- `1ly_revoke_key` — Destructive — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-revoke-key.md
- `1ly_claim_fees` — Financial — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-claim-fees.md
- `1ly_launch_token` — Financial — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-launch-token.md
- `1ly_trade_token` — Financial — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-trade-token.md
- `1ly_withdraw` — Financial — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-withdraw.md
- `1ly_get_details` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-get-details.md
- `1ly_get_stats` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-get-stats.md
- `1ly_list_keys` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-list-keys.md
- `1ly_list_links` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-list-links.md
- `1ly_list_tokens` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-list-tokens.md
- `1ly_list_withdrawals` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-list-withdrawals.md
- `1ly_search` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-search.md
- `1ly_trade_quote` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-trade-quote.md
- `1ly_vault_status` — Read — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-vault-status.md
- `1ly_create_key` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-create-key.md
- `1ly_create_link` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-create-link.md
- `1ly_create_store` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-create-store.md
- `1ly_review` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-review.md
- `1ly_update_avatar` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-update-avatar.md
- `1ly_update_link` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-update-link.md
- `1ly_update_profile` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-update-profile.md
- `1ly_update_socials` — Write — https://policylayer.com/tools/io-github-1lystore-mcp-server/1ly-update-socials.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-1lystore-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-1lystore-mcp-server