Constructs an ordered set of ready-to-use deep-links for a named AINumbers workflow chain or an ad-hoc sequence of tools. Each link points directly to the browser tool; prefill-enabled steps accept #in=<base64url(JSON)> fragments so the tool opens pre-filled. Zero server-side execution -- all too...
AI agents invoke build_workflow_links to trigger actions in Ainumbers Mcp Apps. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call — builds kicked off, notifications sent, workflows started.
| Parameter | Type | Required | Description |
|---|---|---|---|
chain | string | — | Name of a pre-defined chain. One of: aml-programme, card-programme, iso20022-cutover, agentic-policy, treasury-corridor, cbpr-cutover, rtp-participation, sca-co |
steps | array | — | Ad-hoc ordered step list. Mutually exclusive with chain. |
Parameters from the server's own tool schema.
build_workflow_links triggers real processes with real consequences. An agent gone sideways doesn't fire it once — it starts dozens of builds, sends mass notifications, or burns through compute before anyone looks up.
Attacks that exploit this kind of access
Constructs an ordered set of ready-to-use deep-links for a named AINumbers workflow chain or an ad-hoc sequence of tools. Each link points directly to the browser tool; prefill-enabled steps accept #in=<base64url(JSON)> fragments so the tool opens pre-filled. Zero server-side execution -- all tool logic runs deterministically in the user's browser. Use this to hand a user a complete workflow: open step 1, run it, export its Policy Mandate, open step 2 (pre-filled from step 1 outputs), repeat. Named chains: aml-programme, card-programme, iso20022-cutover, agentic-policy, treasury-corridor, cbpr-cutover, rtp-participation, sca-consent-fapi, dora-readiness, transaction-screening, regulatory-impact, fx-corridor, pd-lgd-covenant, stablecoin-reserve, baas-programme, card-interchange, fraud-decisioning, credit-decisioning, consumer-protection, stablecoin-compliance, model-risk-governance, instant-payments-vop, baas-sponsor-bank, einvoicing-vida, us-banking-compliance, wealth-advisory-regbi, bnpl-programme, pi-emi-authorisation, crypto-tax-reporting, bank-capital-liquidity, pillar-two-globe, ccd2-consumer-credit, amlr-single-rulebook, eudi-wallet-acceptance, ach-fraud-monitoring, pqc-migration, agentic-checkout, agent-commerce-conformance, agent-identity-trust, mcp-server-attestation, tempo-fit, tempo-payments, tempo-mpp-agent, tempo-issuance, tempo-onchain-aml, tempo-zone-disclosure, tempo-agentic-checkout, tempo-validator-readiness, canton-capital-efficiency, canton-dvp-readiness, canton-repo-mobility, arc-fit, arc-cpn-payment, arc-stablefx, arc-xreserve-issuance, arc-dvp-settlement, arc-agentic-commerce, arc-reserve-compliance, arc-cctp-transfer, treasury-clearing-fit, treasury-clearing-access-model, treasury-clearing-repo-margin, treasury-clearing-cross-margin, treasury-clearing-collateral, treasury-clearing-capital-relief, treasury-clearing-liquidity, treasury-clearing-onboarding, treasury-clearing-settlement-integrity, canton-counterparty-onboarding, canton-securities-issuance, canton-margin-call, canton-cash-leg-assurance, canton-deposit-compliance, canton-mmf-collateral, canton-securities-lending, mcp-publish-readiness, agentic-commerce-checkout, financial-crime-compliance, stablecoin-issuer-genius-mica, t1-csdr-settlement, dora-resilience, us-treasury-clearing, neobank-baas, ai-act-for-fs, agent-session-receipt, digital-trade-fit, digital-trade-ebl-enforceability, digital-trade-letter-of-credit, digital-trade-doc-integrity, digital-trade-counterparty-aml, digital-trade-finance, digital-trade-tbml-surveillance, digital-trade-audit-pack, wholesale-settlement-fit, wholesale-settlement-cross-network-dvp, wholesale-settlement-deposit-token, wholesale-settlement-settlement-asset, wholesale-settlement-collateral-mobility, wholesale-settlement-intraday-liquidity, wholesale-settlement-participant-onboarding, wholesale-settlement-audit-pack, agent-economy-fit, agent-economy-batch-settlement, agent-economy-payment-receipt, agent-economy-autonomous-guardrail, agent-economy-metering, agent-economy-fraud-runtime, agent-economy-marketplace, agent-economy-audit-pack, ai-governance-fit, ai-governance-conformity, ai-governance-fria-monitoring, ai-governance-fairness-bias, ai-governance-gpai-agentic, ai-governance-credit-ai-conformity, ai-governance-resilience-overlap, ai-governance-audit-pack, cbam-fit, cbam-liability, cbam-precursor, taxonomy-align, taxonomy-kpi, eugb-conformance, climate-scenario, carbon-audit-pack, settlement-discipline-fit, settlement-discipline-penalty, settlement-discipline-failpredict, settlement-discipline-ssi-hygiene, settlement-discipline-alloc-affirm, settlement-discipline-message-conformance, settlement-discipline-buyin, settlement-discipline-audit-pack, pqc-fit, pqc-tls-pki, pqc-swift-iso20022, pqc-fido-webauthn, pqc-blockchain-risk, pqc-hndl-protocol-plan, pqc-audit-pack, sanctions-fit, sanctions-ownership, sanctions-list-coverage, sanctions-fuzzy-calibration, export-control-eccn, export-control-circumvention, sanctions-screening-quality, sanctions-audit-pack, mica-fit, mica-casp-authorization, mica-transitional, mica-whitepaper, mica-mar-surveillance, mica-travel-rule, mica-token-scoping, mica-audit-pack, fida-open-finance-readiness, fida-data-monetisation, mica-passporting-surveillance, cfpb-1033-open-banking, basel-endgame-frtb-capital, sustainability-disclosure-sfdr, green-finance-transition, genius-act-issuer-licensing, trade-finance-lc-lifecycle, insurance-capital-pricing, reinsurance-catastrophe, securities-lending-impact, counterparty-capital-margin, b2b-payments-ap-automation, marketplace-platform-payments, sme-finance-lending, kyc-onboarding-cdd, mcp-security-hardening, basel-iv-capital-stress, sme-credit-intelligence, embedded-finance-licensing, cbdc-dlt-architecture, fca-bnpl-dpc, eu-ai-act-provider-obligations, psd3-psr2-transition, emerging-market-fx-corridor, agentic-payment-protocol-audit, fx-risk-management, dora-third-party-ict-risk, dora-operational-resilience, agentic-rail-standards, dlt-settlement-compliance, dlt-network-governance, iso20022-cross-border-readiness, credit-ecl-valuation, payment-operations-health, payment-economics-benchmarking, card-scheme-dispute-management, sme-government-grants-funding, a2a-payment-rail-compliance, open-banking-api-lifecycle, instant-payments-compliance, nacha-ach-rules-compliance, psr-app-fraud-reimbursement, tempo-subscription-settlement, tempo-gas-economics, canton-selective-disclosure, canton-dtc-treasury, arc-partner-onboarding, arc-multicurrency-corridor, pharma-serialization-custody, food-traceability-fsma204, digital-product-passport-lineage, document-integrity-anchor, content-credential-verification, ai-content-disclosure-conformance, agent-identity-verification, agent-identity-publishing, sbom-provenance-attestation, cra-product-conformance, nis2-entity-scope-and-obligations, nis2-incident-and-supply-chain-readiness, mcp-server-governance-conformance, agent-authorization-lifecycle, emir-trade-report-validation, emir-reconciliation-and-lifecycle, vida-digital-reporting-requirements, vida-platform-and-registration, eudr-due-diligence-statement-validation, eudr-supply-chain-risk-and-traceability, ai-management-system-conformance, ai-governance-framework-crosswalk, ifrs17-measurement-conformance, solvency-ii-reconciliation-and-capital, irrbb-supervisory-outlier-test, irrbb-measurement-and-disclosure. It is categorised as a Execute tool in the Ainumbers Mcp Apps MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.
build_workflow_links accepts 2 parameters: chain, steps. The full parameter table on this page comes from the server's own tool schema.
Register the Ainumbers Mcp Apps MCP server in PolicyLayer and add a rule for build_workflow_links: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Ainumbers Mcp Apps. Nothing to install.
build_workflow_links is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.
Yes. Add a rate_limit block to the build_workflow_links rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for build_workflow_links. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
build_workflow_links is provided by the Ainumbers Mcp Apps MCP server (postoaklabs/ainumbers-mcp-apps). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →