samuni.finance.audit_opinions

SERVERApibase SOURCEapibase-mcp-client

Low RISK CLASS

Category Read

Parameters 30 required

Recommended Allowedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/io-github-whiteknightonhorse-apibase/samuni.finance.audit-opinions.md

WHAT IT DOES

What samuni.finance.audit_opinions does on Apibase

AI agents call samuni.finance.audit_opinions to retrieve information from Apibase without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameter	Type	Required	Description
`year`	integer	—	Financial year-end filter (e.g. 2022 = financial year ended June 2022). Range: 2010-2024.
`limit`	integer	—	Maximum number of audit opinion records to return (1-100, default 20).
`demarcation_code`	string	—	Municipality demarcation code to filter (e.g. CPT=Cape Town, JHB=Johannesburg, ETH=eThekwini/Durban, TSH=Tshwane, EKU=Ekurhuleni). Omit to retrieve opinions acr

Parameters from the server's own tool schema.

RISK

Why samuni.finance.audit_opinions is rated Low

Retrieves publicly available audit data for municipalities without creating, modifying, or deleting any records.

From the tool's definition Get Auditor-General audit outcomes, returns opinion label and PDF report URL

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs samuni.finance.audit_opinions safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Apibase, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For samuni.finance.audit_opinions, this is the rule to start with:

samuni.finance.audit_opinions Allowed

samuni.finance.audit_opinions is read-only, so it stays allowed. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "samuni.finance.audit_opinions": {}
  }
}

ALLOW ONLY THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect Apibase, apply this rule, and every samuni.finance.audit_opinions call is checked against it from then on.

FAQ

Questions about samuni.finance.audit_opinions

What does the samuni.finance.audit_opinions tool do? +

Get Auditor-General of South Africa (AGSA) audit outcomes for municipalities. Opinion codes: clean=Clean Audit, unqualified_emphasis_of_matter=Unqualified with Emphasis of Matter, qualified=Qualified Opinion, adverse=Adverse Opinion, disclaimer=Disclaimer of Opinion. Returns year, opinion label, and PDF report URL. Filter by demarcation code and/or year. Data covers 2010-2024 for all 257 municipalities. Useful for transparency reporting, credit risk assessment, and governance analysis. No auth required. Source: SA National Treasury MFMA data portal. It is categorised as a Read tool in the Apibase MCP Server, which means it retrieves data without modifying state.

What parameters does samuni.finance.audit_opinions accept? +

samuni.finance.audit_opinions accepts 3 parameters: year, limit, demarcation_code. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on samuni.finance.audit_opinions? +

Register the Apibase MCP server in PolicyLayer and add a rule for samuni.finance.audit_opinions: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Apibase. Nothing to install.

What risk level is samuni.finance.audit_opinions? +

samuni.finance.audit_opinions is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit samuni.finance.audit_opinions? +

Yes. Add a rate_limit block to the samuni.finance.audit_opinions rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block samuni.finance.audit_opinions completely? +

Set action: deny in the PolicyLayer policy for samuni.finance.audit_opinions. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides samuni.finance.audit_opinions? +

samuni.finance.audit_opinions is provided by the Apibase MCP server (apibase-mcp-client). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on Apibase, and thousands of servers like it.

This server

All 1384 Apibase tools →

Across the catalogue

The MCP Attack Database →

Guides

Roll out MCP under one policy →Data exfiltration →MCP token cost →