# withdraw_stream

Claim all vested funds from a streaming payment (callable by the recipient).

Agent View of the PolicyLayer registry record for `withdraw_stream`. HTML page: https://policylayer.com/tools/pay-skill-mcp/withdraw-stream

## Facts

- Tool: `withdraw_stream`
- Server: Remit Md MCP Server (`pay-skill/mcp`) — https://policylayer.com/tools/pay-skill-mcp.md
- Homepage: https://github.com/pay-skill/mcp
- Risk category: Financial (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Approval-gated

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "withdraw_stream",
    "arguments": {}
  }
}
```

## Why withdraw_stream is rated Critical

This tool directly transfers financial value (vested funds) to the recipient, which constitutes a financial transaction. Even though it only withdraws already-vested amounts (a constraint that reduces severity slightly compared to unrestricted fund movement), the action commits financial obligations and moves money.

From the tool's own definition: "Tool is named 'withdraw_stream' and described as enabling claiming of 'vested funds from a streaming payment.' The server description explicitly states it 'Enables AI agents to perform financial transactions such as direct payments, escrows, and bounty…"

## Use case

AI agents use withdraw_stream to commit financial operations through Remit Md MCP Server, usually the final step of a payment, billing, or trading workflow. A call moves real money.

## Recommended policy (PolicyLayer)

Verdict: **Approval-gated**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Remit Md MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "withdraw_stream": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}
```

## Other tools on Remit Md MCP Server (27)

- `delete_webhook` — Destructive — https://policylayer.com/tools/pay-skill-mcp/delete-webhook.md
- `claim_start` — Execute — https://policylayer.com/tools/pay-skill-mcp/claim-start.md
- `award_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/award-bounty.md
- `cancel_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/cancel-escrow.md
- `charge_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/charge-tab.md
- `close_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/close-stream.md
- `close_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/close-tab.md
- `create_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-escrow.md
- `create_fund_link` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-fund-link.md
- `create_withdraw_link` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-withdraw-link.md
- `forfeit_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/forfeit-deposit.md
- `open_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/open-stream.md
- `open_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/open-tab.md
- `pay_direct` — Financial — https://policylayer.com/tools/pay-skill-mcp/pay-direct.md
- `place_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/place-deposit.md
- `post_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/post-bounty.md
- `reclaim_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/reclaim-bounty.md
- `release_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/release-escrow.md
- `return_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/return-deposit.md
- `submit_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/submit-bounty.md
- `x402_config` — Financial — https://policylayer.com/tools/pay-skill-mcp/x402-config.md
- `x402_pay` — Financial — https://policylayer.com/tools/pay-skill-mcp/x402-pay.md
- `check_balance` — Read — https://policylayer.com/tools/pay-skill-mcp/check-balance.md
- `get_status` — Read — https://policylayer.com/tools/pay-skill-mcp/get-status.md
- `list_webhooks` — Read — https://policylayer.com/tools/pay-skill-mcp/list-webhooks.md
- `register_webhook` — Write — https://policylayer.com/tools/pay-skill-mcp/register-webhook.md
- `update_webhook` — Write — https://policylayer.com/tools/pay-skill-mcp/update-webhook.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=pay-skill-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/pay-skill-mcp