Prepare deletion/void-style removal of a sales invoice where MYOB permits it. Critical approval required.
AI agents call myob_invoice_prepare_delete to permanently remove resources in MYOB Codex MCP — typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.
This tool prepares deletion of sales invoices, which is a destructive operation that cannot be reversed. Financial invoices are critical business records; their deletion or voiding has permanent consequences for accounting records, audit trails, and financial integrity. The requirement for approval does not change the destructive nature of the action itself. This is the most severe category applicable.
From the tool's definition Tool name contains 'delete' and description states 'deletion/void-style removal of a sales invoice'. Even though approval is required before commit, the tool's purpose is to irreversibly remove or void financial records that cannot be undone.
Attacks that exploit this kind of access
Prepare deletion/void-style removal of a sales invoice where MYOB permits it. Critical approval required. It is categorised as a Destructive tool in the MYOB Codex MCP MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.
Register the MYOB Codex MCP server in PolicyLayer and add a rule for myob_invoice_prepare_delete: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MYOB Codex MCP. Nothing to install.
myob_invoice_prepare_delete is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the myob_invoice_prepare_delete rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for myob_invoice_prepare_delete. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
myob_invoice_prepare_delete is provided by the MYOB Codex MCP server (jaeko44/myob-codex-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →