Create an in-process bot pool with an optional shared daily treasury. The pool lives for this MCP session; treasury accounting is in-memory and the facilitator remains authoritative.
AI agents use paybot_pool_create to commit financial operations through PayBot MCP Server — usually the final step of a payment, billing, or trading workflow. A call moves real money.
Creating a bot pool with a shared daily treasury is a financial operation — it establishes a financial resource pool that can be used to move USDC funds. While it does not directly move money, it sets up the financial structure enabling fund allocation and payments (see sibling tools paybot_pool_allocate, paybot_pay).
From the tool's definition "Create an in-process bot pool with an optional shared daily treasury" — involves creating financial infrastructure (treasury, pool) within a payment system; sibling tools include paybot_pay and paybot_pool_allocate, confirming this is part of financial…
Attacks that exploit this kind of access
Create an in-process bot pool with an optional shared daily treasury. The pool lives for this MCP session; treasury accounting is in-memory and the facilitator remains authoritative. It is categorised as a Financial tool in the PayBot MCP Server MCP Server, which means it involves financial transactions. Block by default and require explicit approval.
Register the PayBot MCP Server MCP server in PolicyLayer and add a rule for paybot_pool_create: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches PayBot MCP Server. Nothing to install.
paybot_pool_create is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the paybot_pool_create rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for paybot_pool_create. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
paybot_pool_create is provided by the PayBot MCP Server MCP server (rbkunnela/paybot-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
Every MCP server has a record like this.
Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.
Teams ship this data inside their own products. See what a licence covers →