# create_withdraw_link

Generate a one-time URL for the operator to withdraw USDC from this wallet.

Agent View of the PolicyLayer registry record for `create_withdraw_link`. HTML page: https://policylayer.com/tools/pay-skill-mcp/create-withdraw-link

## Facts

- Tool: `create_withdraw_link`
- Server: Remit Md MCP Server (`pay-skill/mcp`) — https://policylayer.com/tools/pay-skill-mcp.md
- Homepage: https://github.com/pay-skill/mcp
- Risk category: Financial (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Approval-gated

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create_withdraw_link",
    "arguments": {}
  }
}
```

## Why create_withdraw_link is rated Critical

This tool commits financial obligations by enabling withdrawal of USDC funds. Misuse by an AI agent could result in unauthorized transfer of cryptocurrency assets, representing direct financial loss. The severity is high rather than critical because the withdrawal requires operator action via a generated link (not automatic), providing a minor friction point, but the risk of asset loss remains substantial.

From the tool's own definition: "Tool name 'create_withdraw_link' and description 'Generate a one-time URL for the operator to withdraw USDC from this wallet' directly indicates movement of cryptocurrency (USDC) from a controlled wallet."

## Use case

AI agents use create_withdraw_link to commit financial operations through Remit Md MCP Server, usually the final step of a payment, billing, or trading workflow. A call moves real money.

## Recommended policy (PolicyLayer)

Verdict: **Approval-gated**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Remit Md MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_withdraw_link": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}
```

## Other tools on Remit Md MCP Server (27)

- `delete_webhook` — Destructive — https://policylayer.com/tools/pay-skill-mcp/delete-webhook.md
- `claim_start` — Execute — https://policylayer.com/tools/pay-skill-mcp/claim-start.md
- `award_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/award-bounty.md
- `cancel_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/cancel-escrow.md
- `charge_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/charge-tab.md
- `close_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/close-stream.md
- `close_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/close-tab.md
- `create_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-escrow.md
- `create_fund_link` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-fund-link.md
- `forfeit_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/forfeit-deposit.md
- `open_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/open-stream.md
- `open_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/open-tab.md
- `pay_direct` — Financial — https://policylayer.com/tools/pay-skill-mcp/pay-direct.md
- `place_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/place-deposit.md
- `post_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/post-bounty.md
- `reclaim_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/reclaim-bounty.md
- `release_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/release-escrow.md
- `return_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/return-deposit.md
- `submit_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/submit-bounty.md
- `withdraw_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/withdraw-stream.md
- `x402_config` — Financial — https://policylayer.com/tools/pay-skill-mcp/x402-config.md
- `x402_pay` — Financial — https://policylayer.com/tools/pay-skill-mcp/x402-pay.md
- `check_balance` — Read — https://policylayer.com/tools/pay-skill-mcp/check-balance.md
- `get_status` — Read — https://policylayer.com/tools/pay-skill-mcp/get-status.md
- `list_webhooks` — Read — https://policylayer.com/tools/pay-skill-mcp/list-webhooks.md
- `register_webhook` — Write — https://policylayer.com/tools/pay-skill-mcp/register-webhook.md
- `update_webhook` — Write — https://policylayer.com/tools/pay-skill-mcp/update-webhook.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=pay-skill-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/pay-skill-mcp