build_quote · Composite MCP Sales Intelligence MCP

WHAT IT DOES

What build_quote does on Composite MCP Sales Intelligence

AI agents use build_quote to create or update resources in Composite MCP Sales Intelligence — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Composite MCP Sales Intelligence environment.

WHY IT NEEDS A POLICY

Why build_quote needs a policy

This tool creates a draft quote (a cart with products) in the TD Synnex system. Creating a draft is a reversible write operation — it does not finalize a purchase or move money. While it could be a precursor to financial action (checkout), at this stage it is a Write. Severity is medium because creating quotes with incorrect products/pricing could mislead sales workflows or trigger unintended downstream actions.

From the tool's definition "Create a draft quote by building a TD Synnex cart with products"

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

build_quote Rate-limited

build_quote stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "build_quote": {
      "limits": [
        {
          "counter": "build_quote_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Composite MCP Sales Intelligence, so you can run agents against it safely.

FAQ

Questions about build_quote

What does the build_quote tool do? +

Create a draft quote by building a TD Synnex cart with products. It is categorised as a Write tool in the Composite MCP Sales Intelligence MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on build_quote? +

Register the Composite MCP Sales Intelligence MCP server in PolicyLayer and add a rule for build_quote: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Composite MCP Sales Intelligence. Nothing to install.

What risk level is build_quote? +

build_quote is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit build_quote? +

Yes. Add a rate_limit block to the build_quote rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block build_quote completely? +

Set action: deny in the PolicyLayer policy for build_quote. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides build_quote? +

build_quote is provided by the Composite MCP Sales Intelligence MCP server (jaceryan5150/composite-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.