list_payment_intents

What list_payment_intents does on Stripe

AI agents call list_payment_intents to retrieve information from Stripe without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_payment_intents is rated Low

This tool retrieves payment intent records without side effects, placing it in the Read category. However, the severity is medium rather than low because PaymentIntent data can contain sensitive financial information (amounts, customer details, payment status), making unauthorized enumeration a meaningful security concern in a financial system context.

From the tool's definition Tool name 'list_payment_intents' and description 'List all PaymentIntents' indicate a retrieval/query operation. The sibling tools include financial operations (create_refund, create_invoice, cancel_subscription), confirming this is a Stripe payment platform.

The rule that runs list_payment_intents safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Stripe, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_payment_intents, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_payment_intents": {}
  }
}

Questions about list_payment_intents