diff --git a/finbot/mcp/servers/finstripe/server.py b/finbot/mcp/servers/finstripe/server.py index d8886a45..8276f625 100644 --- a/finbot/mcp/servers/finstripe/server.py +++ b/finbot/mcp/servers/finstripe/server.py @@ -59,8 +59,17 @@ def create_transfer( Transfers funds from the company account to a vendor's bank account. Returns the transfer details including a unique transfer ID for tracking. """ +patch-42 + if ( + getattr(session_context, "portal_type", None) == "vendor" + and getattr(session_context, "current_vendor_id", None) is not None + and session_context.current_vendor_id != vendor_id + ): + return {"error": "Vendor session can only initiate transfers to own account"} +======= if amount <= 0: return {"error": "amount must be greater than zero"} + main transfer_id = _generate_transfer_id()