transfer_order_get_entity_by_key

What transfer_order_get_entity_by_key does on MCP Dynamics 365 Commerce Server

AI agents call transfer_order_get_entity_by_key to retrieve information from MCP Dynamics 365 Commerce Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why transfer_order_get_entity_by_key is rated Low

This tool retrieves a transfer order record by its identifier. It is a read-only query operation that returns existing data without side effects, modifications, or destructive actions. The low severity reflects minimal blast radius - an AI agent misusing this tool could only access transfer order information already stored in the system, with no ability to alter, delete, or execute operations.

From the tool's definition Tool name contains 'get' and description states 'Gets transfer order by id' - a straightforward data retrieval operation with no modification, deletion, or execution capabilities.

The rule that runs transfer_order_get_entity_by_key safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Dynamics 365 Commerce Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For transfer_order_get_entity_by_key, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "transfer_order_get_entity_by_key": {}
  }
}

Questions about transfer_order_get_entity_by_key