What an agent can do
Scope of the tools#
Of the 117 tools, 63 only read and 54 change state. 20 of those 54 are marked as sensitive.
The ones marked as sensitive, grouped by theme. The list comes from the catalog: it is every tool with the sensitive access level. Sending messages (links, receipts or notices over WhatsApp or email) counts as a write, not as a sensitive operation.
Move money: refunds and captures, stored-card charges, bank transfers, their confirmation and dual control
- tilopay_modify_transaction: Capture, refund or reverse
- tilopay_charge_saved_card: Charge a customer's saved card
- tilopay_saved_cards_create_payments: Charge stored cards
- baas_send_transfer: Send BaaS transfer
- baas_confirm_transfer: Authorize the pending transfer
- banca_decide_approval: Approve or reject a pending operation
Delete or deactivate: links, products, plans, coupons, contacts, stored cards, reminders, stores, domains and orders
- tilopay_delete_payment_link: Delete payment link
- tilopay_catalog_delete_item: Delete a catalog product
- tilopay_delete_contact: Delete contact
- tilopay_store_delete: Disable a micro-store
- tilopay_store_domain_remove: Remove a custom domain
- tilopay_orders_disable: Turn off order management
- tilopay_cancel_reminder: Cancel reminder
- tilopay_recurring_delete_plan: Delete subscription plan
- tilopay_recurring_delete_coupon: Delete a coupon
- tilopay_remove_saved_card: Delete a customer's saved card
Change a subscriber's status and their future charges
- tilopay_recurring_manage_subscriber: Pause, reactivate or delete a subscriber
- tilopay_recurring_edit_subscriber: Edit a plan's subscriber
Cut access: unlinking the account and removing an employee
- tilopay_unlink_account: Unlink my account
- tilopay_remove_employee: Remove an employee's access
Permission inheritance#
The server uses your API credentials, so it inherits exactly its permissions: it does not impose additional barriers per tool. An active user can issue refunds and run bulk charges.
Controls that do exist#
- A per-user activation switch, which cuts access without deleting the account.
- A separate administrator role, which only serves to manage users and credentials.
- A rate limit of 60 calls per minute per user.
Human confirmation#
Human confirmation before a sensitive operation depends on the MCP client, not on Tilopay. Always require it for write tools, and do not negotiate it for refunds or bulk charges.
The per-tool detail, with parameters and output, lives on each group page and in the
mcp.json.
Last verified: 2026-10-07 · Owner: equipo-integraciones