Discount Guardrail

Name: Discount Guardrail
Availability: InStock
Author: Kata Team

Puts the pricing clause and the actual arithmetic in front of whoever is about to approve.

Requires external credentials

After connecting, this agent asks for your own API keys for third-party services to work. Only provide keys you trust this agent with — review its setup before connecting any account.

Works with

Claude (web & desktop)ChatGPT (Plus / Pro)CursorVS Code (Copilot)Claude CodeGemini CLIWindsurfClineContinueZedLM StudioGooseJetBrains AI AssistantWarpPostmanand more

Before you connect: what this agent would do

A preview derived from this agent’s definition — not a live run. Nothing runs and no key is sent until you connect. FindAgent runs it on the hosted connection.

Tools it can use (5)

get_pricing_policyRead-only
Fetch the written pricing and discount policy, including thresholds and the floor.
Reaches: {confluence_site}.atlassian.net
Uses your Confluence Cloud token.
get_dealRead-only
Fetch the deal with amount, term, stage, and the line items the discount applies to.
Reaches: api.hubapi.com
Uses your HubSpot private app token.
get_line_itemsRead-only
Fetch a deal's line items with list price and quantity, so the discount can actually be computed.
Reaches: api.hubapi.com
Uses your HubSpot private app token.
search_comparable_dealsCan change data
Find recently closed comparable deals, to say whether this discount is precedented.
Reaches: api.hubapi.com
Uses your HubSpot private app token.
notify_approverCan change data
Post the request to the channel for the approval level the policy requires.
Reaches: slack.com
Uses your Slack bot token.

Credentials it will ask for (3)

HubSpot private app token
Only ever sent to: api.hubapi.com
Confluence Cloud token
Only ever sent to: atlassian.net
Format: Paste the Base64 encoding of “id:token” (e.g. your email and API token joined by a colon), not the raw token. Many tools show this ready-made as your “Basic auth” value.
Slack bot token
Only ever sent to: slack.com

Safety rails that guard it

Every result is scanned for leaked secrets and prompt-injection before it reaches you — a check no agent can turn off.
These personal details are removed from your input before the agent sees them: Credit card, IBAN, National ID.
A request larger than 60,000 characters is rejected before it runs.
get_dealRate limited to 300/hour.Safe to retry automatically if a run is interrupted.
get_line_itemsRate limited to 300/hour.Safe to retry automatically if a run is interrupted.
notify_approverRate limited to 60/hour.Runs only after get_pricing_policy has run first.
get_pricing_policyRate limited to 120/hour.Safe to retry automatically if a run is interrupted.
search_comparable_dealsRate limited to 120/hour.Safe to retry automatically if a run is interrupted.

How FindAgent keeps agents safe

Run locally

This MCP server runs on your own machine — FindAgent only points you at it. Run the command below, then add it to your MCP client. Nothing is hosted or proxied on our side.

terminal

npx -y @findagent/mcp run

Add it to your MCP client

Paste this into your client config (e.g. claude_desktop_config.json or a Cursor mcp.json), then restart the client.

mcp client config

{
  "mcpServers": {
    "discount-guardrail": {
      "command": "npx",
      "args": [
        "-y",
        "@findagent/mcp",
        "run"
      ]
    }
  }
}

What you'll need — and where to get it

This agent will ask you for the following. You enter them when you connect — they're encrypted and never shared with the creator.

HubSpot private app token
A HubSpot private app access token with crm.objects.deals read and crm.objects.line_items read. Read-only scopes are enough — this agent never writes to the CRM, and should not be able to.
Get this from hubapi.com's account or API settings.
Paste the value as a single line.
Only sent to: api.hubapi.com
Confluence Cloud token
Base64 of 'your-email:your-api-token' — encode it yourself before pasting; the runtime only adds the Basic prefix. Create the token at id.atlassian.com/manage-profile/security/api-tokens. Needs read access to the page holding your pricing and discount policy.
Get this from atlassian.net's account or API settings.
Paste the value as a single line.
Only sent to: atlassian.net
Slack bot token
A bot token starting with xoxb-. Needs chat:write, and the bot must be invited to every approval channel.
Create a Slack app (api.slack.com/apps), add the scopes the agent needs, install it to your workspace, and copy the bot/user token.
Paste the value as a single line.
Only sent to: slack.com