Generate a tracking link for a campaign you
AI agents use generateAffiliateLink to create or update resources in Affilync MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Affilync MCP Server environment.
Generating an affiliate link creates a new tracking resource that modifies the state of the affiliate campaign (adds a new trackable identifier). This is reversible (links can be disabled/removed) and has no financial movement directly, but it enables financial transactions downstream.
From the tool's definition Tool name 'generateAffiliateLink' and description indicate creation of a tracking link—a new, persistent resource that will be used to monitor affiliate activity. The description is truncated ('for a campaign you') but the intent to create/generate is clear.
Attacks that exploit this kind of access
Generate a tracking link for a campaign you. It is categorised as a Write tool in the Affilync MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
Register the Affilync MCP Server MCP server in PolicyLayer and add a rule for generateAffiliateLink: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Affilync MCP Server. Nothing to install.
generateAffiliateLink is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the generateAffiliateLink rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for generateAffiliateLink. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
generateAffiliateLink is provided by the Affilync MCP Server MCP server (moneyflowz367/affilync-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →