reconcile_orders

Server Razorpay Recon qalalabs/razorpay-recon-mcp

Category Write

Risk class Medium

Parameters 00 required

WHAT IT DOES

What reconcile_orders does on Razorpay Recon

AI agents use reconcile_orders to create or update resources in Razorpay Recon — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Razorpay Recon environment.

WHY IT NEEDS A POLICY

Why reconcile_orders needs a policy

The tool fetches and matches payment data (Read) but also creates draft journal entries in Odoo, which is a Write operation that modifies financial records. While it doesn't move money directly, creating journal entries in an accounting system is a significant financial record mutation.

From the tool's definition Creates draft journal entries in Odoo for matched payments

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

reconcile_orders Rate-limited

reconcile_orders stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "reconcile_orders": {
      "limits": [
        {
          "counter": "reconcile_orders_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Razorpay Recon, so you can run agents against it safely.

FAQ

Questions about reconcile_orders

What does the reconcile_orders tool do? +

Reconcile Razorpay payments against Odoo orders. Fetches payments and orders from Razorpay, matches them against Odoo sale orders, and classifies each as: matched, unmatched, refund, or failed. Creates draft journal entries in Odoo for matched payments. Args: from_date: Start date (YYYY-MM-DD). Defaults to yesterday. to_date: End date (YYYY-MM-DD). Defaults to today. Returns: Reconciliation summary with match counts, rate, and transaction details. It is categorised as a Write tool in the Razorpay Recon MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on reconcile_orders? +

Register the Razorpay Recon MCP server in PolicyLayer and add a rule for reconcile_orders: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Razorpay Recon. Nothing to install.

What risk level is reconcile_orders? +

reconcile_orders is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit reconcile_orders? +

Yes. Add a rate_limit block to the reconcile_orders rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block reconcile_orders completely? +

Set action: deny in the PolicyLayer policy for reconcile_orders. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides reconcile_orders? +

reconcile_orders is provided by the Razorpay Recon MCP server (qalalabs/razorpay-recon-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.