cursor_set_user_spend_limit

Set a spending limit in USD for a specific team member

SERVERSage MCP SOURCEsagemcp/sagemcp

Critical RISK CLASS

Category Financial

Parameters 00 required

Recommended Approval-gatedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/sagemcp-sagemcp/cursor-set-user-spend-limit.md

WHAT IT DOES

What cursor_set_user_spend_limit does on Sage MCP

AI agents use cursor_set_user_spend_limit to commit financial operations through Sage MCP, usually the final step of a payment, billing, or trading workflow. A call moves real money.

RISK

Why cursor_set_user_spend_limit is rated Critical

This tool directly controls financial parameters by setting spending limits in USD for team members. While it caps spending rather than directly moving money, it commits financial policy that governs how much money can be spent, which falls squarely in the Financial category. Misuse could remove spending limits (set to unlimited) or set inappropriate caps, affecting financial exposure.

From the tool's definition Set a spending limit in USD for a specific team member

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs cursor_set_user_spend_limit safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cursor_set_user_spend_limit, this is the rule to start with:

cursor_set_user_spend_limit Approval-gated

Any call to cursor_set_user_spend_limit is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cursor_set_user_spend_limit": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect Sage MCP, apply this rule, and every cursor_set_user_spend_limit call is checked against it from then on.

FAQ

Questions about cursor_set_user_spend_limit

What does the cursor_set_user_spend_limit tool do? +

Set a spending limit in USD for a specific team member. It is categorised as a Financial tool in the Sage MCP MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on cursor_set_user_spend_limit? +

Register the Sage MCP server in PolicyLayer and add a rule for cursor_set_user_spend_limit: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Sage MCP. Nothing to install.

What risk level is cursor_set_user_spend_limit? +

cursor_set_user_spend_limit is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit cursor_set_user_spend_limit? +

Yes. Add a rate_limit block to the cursor_set_user_spend_limit rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block cursor_set_user_spend_limit completely? +

Set action: deny in the PolicyLayer policy for cursor_set_user_spend_limit. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides cursor_set_user_spend_limit? +

cursor_set_user_spend_limit is provided by the Sage MCP server (sagemcp/sagemcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on Sage, and thousands of servers like it.

This server

All 359 Sage tools → Critical-risk tools on this server →

Across the catalogue

place_limit_order on Lighter MCP → All critical-risk MCP tools → The MCP Attack Database →

Guides

Govern MCP payment tools →Human-in-the-loop →Tool call approval →