facturx_generate · Facturx MCP: Risk & Policy

WHAT IT DOES

What facturx_generate does on Facturx

AI agents use facturx_generate to create or update resources in Facturx — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Facturx environment.

WHY IT NEEDS A POLICY

Why facturx_generate needs a policy

This is a Write operation because it creates new structured data (XML invoice files) from input parameters. Severity is medium because while invoice documents carry financial significance, the tool itself only generates the file; actual financial commitment and submission are delegated to chorus_submit. The tool cannot directly delete, execute arbitrary commands, or move money.

From the tool's definition Tool generates (génère) a valid XML Factur-X file from billing data. The tool creates new invoice documents in standardized format (EN 16931/EU norm).

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

facturx_generate Rate-limited

facturx_generate stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "facturx_generate": {
      "limits": [
        {
          "counter": "facturx_generate_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Facturx, so you can run agents against it safely.

FAQ

Questions about facturx_generate

What does the facturx_generate tool do? +

Génère un fichier XML Factur-X valide (norme EN 16931 / UE) à partir des données de facturation. It is categorised as a Write tool in the Facturx MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on facturx_generate? +

Register the Facturx MCP server in PolicyLayer and add a rule for facturx_generate: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Facturx. Nothing to install.

What risk level is facturx_generate? +

facturx_generate is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit facturx_generate? +

Yes. Add a rate_limit block to the facturx_generate rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block facturx_generate completely? +

Set action: deny in the PolicyLayer policy for facturx_generate. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides facturx_generate? +

facturx_generate is provided by the Facturx MCP server (samdreamsmaker/facturx-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.