// MCP TOOL REFERENCE

create-transfer

Create a transfer for a customer

Free to start. No card required.

WHEN AGENTS USE THIS TOOL

AI agents use create-transfer to initiate financial transactions through Mcp Flutterwave. Financial operations involve real money and are irreversible once processed. PolicyLayer blocks financial tools by default, requiring explicit human approval with transaction-level limits to prevent unauthorised spending.

create-transfer moves real money. Without a policy, an autonomous agent could initiate transactions that drain accounts or exceed budgets. PolicyLayer blocks financial tools by default, requiring human-in-the-loop approval with configurable spending limits per transaction and per time window.

RECOMMENDED POLICY

Financial tools involve real money. Block by default and require explicit human approval before enabling.

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create-transfer": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

See the full Mcp Flutterwave policy for all 10 tools.

MORE MCP FLUTTERWAVE TOOLS

Write create-beneficiary Write create-checkout Write disable-checkout Read get-beneficiaries Read get-transaction-timeline Read get-transactions Read get-transfers Read resent-failed-webhook

View all 10 tools →

WHAT CAN GO WRONG

These attack patterns abuse exactly the kind of access create-transfer gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

OTHER FINANCIAL TOOLS

Other financial tools across the catalogue. The same approach applies to each: deny by default, or require human approval.

Atv build_deposit_tx Atv build_queue_withdraw_tx Atv build_redeem_withdraw_tx Atv build_unqueue_withdraw_tx Atv build_withdraw_tx AbraFlexi bank_transaction_create

FAQ

What does the create-transfer tool do? +

Create a transfer for a customer. It is categorised as a Financial tool in the Mcp Flutterwave MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on create-transfer? +

Register the Mcp Flutterwave MCP server in PolicyLayer and add a rule for create-transfer: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Mcp Flutterwave. Nothing to install.

What risk level is create-transfer? +

create-transfer is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit create-transfer? +

Yes. Add a rate_limit block to the create-transfer rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block create-transfer completely? +

Set action: deny in the PolicyLayer policy for create-transfer. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides create-transfer? +

create-transfer is provided by the Mcp Flutterwave MCP server (mcp-flutterwave). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Mcp Flutterwave tool call.

Deterministic rules across all 10 Mcp Flutterwave tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE MCP FLUTTERWAVE →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

create-transfer

// WHEN AGENTS USE THIS TOOL

// RECOMMENDED POLICY

// MORE MCP FLUTTERWAVE TOOLS

// WHAT CAN GO WRONG

// OTHER FINANCIAL TOOLS

// RELATED READING

// FAQ