get_invoice

What get_invoice does on Sanka MCP Server

AI agents call get_invoice to retrieve information from Sanka MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_invoice is rated Low

This is a retrieval operation that queries and returns invoice data without side effects. While invoices may contain financial information, the tool itself only reads data—it does not move money, create charges, or modify records. Severity is low because retrieving invoice data poses minimal risk; the blast radius of misuse is limited to information disclosure of potentially sensitive financial documents.

From the tool's definition Tool description states 'Load one invoice' with no modification, deletion, or execution capability. It retrieves a single document by identifier (invoice id, numeric id, or external reference).

The rule that runs get_invoice safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sanka MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_invoice, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_invoice": {}
  }
}

Questions about get_invoice