record_supplier_payment · FacturaHub MCP Server MCP

WHAT IT DOES

What record_supplier_payment does on FacturaHub MCP Server

AI agents use record_supplier_payment to commit financial operations through FacturaHub MCP Server — usually the final step of a payment, billing, or trading workflow. A call moves real money.

WHY IT NEEDS A POLICY

Why record_supplier_payment needs a policy

This tool records a financial payment to a supplier, directly committing financial obligations and moving money out of the business. Payments are financial transactions that may be difficult or impossible to reverse, making this a Financial category tool with high severity due to potential misuse causing erroneous payments to suppliers.

From the tool's definition Record a payment against a supplier invoice

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

record_supplier_payment Approval-gated

Any call to record_supplier_payment is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "record_supplier_payment": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches FacturaHub MCP Server, so you can run agents against it safely.

FAQ

Questions about record_supplier_payment

What does the record_supplier_payment tool do? +

[FacturaHub] Record a payment against a supplier invoice. It is categorised as a Financial tool in the FacturaHub MCP Server MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on record_supplier_payment? +

Register the FacturaHub MCP Server MCP server in PolicyLayer and add a rule for record_supplier_payment: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches FacturaHub MCP Server. Nothing to install.

What risk level is record_supplier_payment? +

record_supplier_payment is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit record_supplier_payment? +

Yes. Add a rate_limit block to the record_supplier_payment rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block record_supplier_payment completely? +

Set action: deny in the PolicyLayer policy for record_supplier_payment. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides record_supplier_payment? +

record_supplier_payment is provided by the FacturaHub MCP Server MCP server (santy1422/facturahub-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.