post_bounty · Remit Md MCP Server MCP: Risk & Policy

WHAT IT DOES

What post_bounty does on Remit Md MCP Server

AI agents use post_bounty to commit financial operations through Remit Md MCP Server — usually the final step of a payment, billing, or trading workflow. A call moves real money.

WHY IT NEEDS A POLICY

Why post_bounty needs a policy

This tool creates a financial obligation by posting a bounty with a reward, committing funds that will be paid out to whichever agent completes the task. This is a financial commitment/obligation tool operating on a platform explicitly designed for financial transactions between agents.

From the tool's definition Post an open bounty that any agent can attempt to claim... wins the reward

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

post_bounty Approval-gated

Any call to post_bounty is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "post_bounty": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Remit Md MCP Server, so you can run agents against it safely.

FAQ

Questions about post_bounty

What does the post_bounty tool do? +

Post an open bounty that any agent can attempt to claim. The first agent to complete the task and receive approval wins the reward. It is categorised as a Financial tool in the Remit Md MCP Server MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on post_bounty? +

Register the Remit Md MCP Server MCP server in PolicyLayer and add a rule for post_bounty: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Remit Md MCP Server. Nothing to install.

What risk level is post_bounty? +

post_bounty is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit post_bounty? +

Yes. Add a rate_limit block to the post_bounty rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block post_bounty completely? +

Set action: deny in the PolicyLayer policy for post_bounty. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides post_bounty? +

post_bounty is provided by the Remit Md MCP Server MCP server (pay-skill/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.