swarmtrade_confirm_delivery · Swarmtrade MCP: Risk & Policy

WHAT IT DOES

What swarmtrade_confirm_delivery does on Swarmtrade

AI agents use swarmtrade_confirm_delivery to commit financial operations through Swarmtrade — usually the final step of a payment, billing, or trading workflow. A call moves real money.

WHY IT NEEDS A POLICY

Why swarmtrade_confirm_delivery needs a policy

This tool releases escrowed funds/assets upon delivery confirmation. Releasing escrow is an irreversible financial action that moves money or assets from the escrow account to the counterparty. Misuse could result in funds being released prematurely or fraudulently, making this a critical financial risk.

From the tool's definition Confirm that an asset has been delivered, releasing escrowed

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

swarmtrade_confirm_delivery Approval-gated

Any call to swarmtrade_confirm_delivery is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "swarmtrade_confirm_delivery": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Swarmtrade, so you can run agents against it safely.

FAQ

Questions about swarmtrade_confirm_delivery

What does the swarmtrade_confirm_delivery tool do? +

Confirm that an asset has been delivered, releasing escrowed. It is categorised as a Financial tool in the Swarmtrade MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on swarmtrade_confirm_delivery? +

Register the Swarmtrade MCP server in PolicyLayer and add a rule for swarmtrade_confirm_delivery: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Swarmtrade. Nothing to install.

What risk level is swarmtrade_confirm_delivery? +

swarmtrade_confirm_delivery is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit swarmtrade_confirm_delivery? +

Yes. Add a rate_limit block to the swarmtrade_confirm_delivery rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block swarmtrade_confirm_delivery completely? +

Set action: deny in the PolicyLayer policy for swarmtrade_confirm_delivery. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides swarmtrade_confirm_delivery? +

swarmtrade_confirm_delivery is provided by the Swarmtrade MCP server (tjcrowley/swarmtrade). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.