purchase_order_get_entity_by_key

What purchase_order_get_entity_by_key does on MCP Dynamics 365 Commerce Server

AI agents call purchase_order_get_entity_by_key to retrieve information from MCP Dynamics 365 Commerce Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why purchase_order_get_entity_by_key is rated Low

This tool retrieves a specific purchase order record by its identifier. It performs a query operation with no side effects—it does not create, modify, delete, or execute any operations. The data returned is informational only. Severity is low because reading purchase order data, while potentially sensitive, does not directly impact system integrity or enable financial transactions by itself.

From the tool's definition Tool name 'get_entity_by_key' and description 'Get a purchase order by id' indicate a retrieval operation with no modification capability. The verb 'Get' is a standard read operation.

The rule that runs purchase_order_get_entity_by_key safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Dynamics 365 Commerce Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For purchase_order_get_entity_by_key, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "purchase_order_get_entity_by_key": {}
  }
}

Questions about purchase_order_get_entity_by_key