GoHighLevel MCP Server MCP Policy · 406 Tools

Q: Can an AI agent move money through the GoHighLevel MCP Server MCP server?

Yes. The GoHighLevel MCP Server server exposes 7 financial tools including charge, send-invoice, record-invoice. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Q: Can an AI agent delete data through the GoHighLevel MCP Server MCP server?

Yes. The GoHighLevel MCP Server server exposes 60 destructive tools including bulk-delete-media-objects, bulk-delete-social-planner-posts, cancel-invoice-schedule. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

Q: How do I prevent bulk modifications through GoHighLevel MCP Server?

The GoHighLevel MCP Server server has 158 write tools including remove-followers-contact, remove-followers-opportunity, remove-tags. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach GoHighLevel MCP Server.

Q: How many tools does the GoHighLevel MCP Server MCP server expose?

406 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 174 are read-only. 232 can modify, create, or delete data.

Q: How do I enforce a policy on GoHighLevel MCP Server?

Register the GoHighLevel MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

TOOL MAP

What GoHighLevel MCP Server exposes to your agents

Read (174) Write / Execute (165) Destructive / Financial (67)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous GoHighLevel MCP Server tools

Financial · Critical charge This tool directly creates financial charges against a wallet, which constitutes a financial transaction. Financial · High send-invoice Sending an invoice is a financial operation that initiates a billing/payment request to a customer. Financial · Critical auto-payment-invoice-schedule This tool manages automatic payment schedules, directly involving financial transactions. Financial · Critical generate-payment-link This tool modifies SaaS subscription state and generates payment links, both of which commit financial obligations.

232 of GoHighLevel MCP Server's 406 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control GoHighLevel MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and GoHighLevel MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "charge": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "bulk-delete-media-objects": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "remove-followers-contact": {
    "limits": [
      {
        "counter": "remove-followers-contact_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "active-numbers": {
    "limits": [
      {
        "counter": "active-numbers_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register GoHighLevel MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOHIGHLEVEL →

Free to start. No card required.

FULL CATALOGUE

All 406 GoHighLevel MCP Server tools

FINANCIAL 7 tools

Financial charge Create a new wallet charge Financial send-invoice API to send invoice by invoice id Financial record-invoice API to record manual payment for an invoice by invoice id Financial record-order-payment The Financial auto-payment-invoice-schedule API to manage auto payment for a schedule Financial generate-payment-link Update SaaS subscription for given locationId and customerId Financial update-saas-subscription-deprecated Update SaaS subscription for given locationId and customerId

DESTRUCTIVE 60 tools

EXECUTE 7 tools

Execute start-twitter-oauth <div><div> <span style= Execute start-csv-finalize Start CSV Finalize Execute get-location-access-token This API allows you to generate locationAccessToken from AgencyAccessToken Execute live-chat-agent-typing Agent/AI-Bot will call this when they are typing a message in live chat message Execute pause-location-deprecated Pause Sub account for given locationId Execute add-contact-to-workflow Add Contact to Workflow Execute send-a-new-message Post the necessary fields for the API to send a new message.

WRITE 158 tools

Write remove-followers-contact Remove Followers Write remove-followers-opportunity Remove Followers Write remove-tags Remove Tags Write pause-location Pause Sub account for given locationId Write add-an-inbound-message Post the necessary fields for the API to add a new inbound message. <br /> Write add-an-outbound-message Post the necessary fields for the API to add a new outbound call. Write add-contact-to-campaign Add contact to Campaign Write add-followers-contact Add Followers Write add-followers-opportunity Add Followers Write add-remove-contact-from-business Add/Remove Contacts From Business . Passing a \ Write add-tags Add Tags Write attach-facebook-page-group Attach facebook pages Write attach-instagram-page-group Attach Instagram Professional Accounts Write attach-linkedin-page-profile Attach linkedin pages and profile Write attach-tiktok-profile Attach Tiktok profile Write attach-twitter-profile <div><div> <span style= Write bulk-disable-saas Disable SaaS for locations for given locationIds Write bulk-disable-saas-deprecated Disable SaaS for locations for given locationIds Write bulk-enable-saas Enable SaaS mode for multiple locations with support for both SaaS v1 and v2 Write bulk-enable-saas-deprecated Enable SaaS mode for multiple locations with support for both SaaS v1 and v2 Write bulk-update-media-objects Updates metadata or status of multiple files and folders Write bulk-update-product-review Update one or multiple product reviews: status, reply, etc. Write bulkEdit API to bulk edit products and their associated prices (max 30 entities) Write create-action Create a new action for a voice AI agent. Actions define specific behaviors and capabilities for the agent dur Write create-agent Create a new voice AI agent configuration and settings Write create-appointment Create appointment Write create-appointment-note Create Note Write create-association Allows you to update tags to multiple contacts at once, you can add or remove tags from the contacts Write create-association-2 Allow you to create contact - contact , contact - custom objects associations, will add more in the future.Doc Write create-block-slot Create block slot Write create-blog-post The Write create-business Create Business Write create-calendar Create calendar in a location. Write create-calendar-group Create Calendar Group Write create-calendar-resource Create calendar resource by resource type Write create-config API to create a new payment config for given location Write create-contact Please find the list of acceptable values for the \ Write create-conversation Creates a new conversation with the data provided Write create-coupon The Write create-custom-field Create Custom Field Write create-custom-field-2 <div> <p> Create Custom Field </p> <div> <span style= Write create-custom-field-folder <div> <p> Create Custom Field Folder </p> <div> <span style= Write create-custom-object-schema Allows you to create a custom object schema. To understand objects and records, please have a look at the docu Write create-custom-value Create Custom Value Write create-estimate-template Create a new estimate template Write create-event-notification Create Calendar notifications, either one or multiple. All notification settings must be for single calendar o Write create-integration API to create a new association for an app and location Write create-integration-provider The Write create-invoice API to create an invoice Write create-invoice-from-estimate Create a new invoice from an existing estimate Write create-invoice-schedule API to create an invoice Schedule Write create-invoice-template API to create a template Write create-link Create Link Write create-location <div> <p>Create a new Sub-Account (Formerly Location) based on the data provided</p> Write create-media-folder Creates a new folder in the media library Write create-new-estimate Create a new estimate with the provided details Write create-note Create Note Write create-object-record Create a Custom Object Record. Supported Objects business and custom objects. Documentation Link - https://doc Write create-opportunity Create Opportunity Write create-order-fulfillment The Write create-post Create posts for all supported platforms. It is possible to create customized posts per channel by using the s Write create-price-for-product The Write create-product The Write create-product-collection Create a new Product Collection for a specific location Write create-recurring-task Create Recurring Task Write create-redirect The Write create-relation Create Relation.Documentation Link - https://doc.clickup.com/8631005/d/h/87cpx-293776/cd0f4122abc04d3 Write create-shipping-carrier The Write create-shipping-rate The Write create-shipping-zone The Write create-store-setting Create or update store settings by altId and altType. Write create-tag Create tag Write create-task Create Task Write create-template Create a new template Write create-user Create User Write custom-provider-marketplace-app-update-capabilities Toggle capabilities for the marketplace app tied to the OAuth client Write disable-group Disable Group Write disconnect-config API to disconnect an existing payment config for given location Write edit-appointment Update appointment Write edit-block-slot Update block slot by ID Write edit-group Update Group by group ID Write edit-post Create posts for all supported platforms. It is possible to create customized posts per channel by using the s Write enable-saas-location <div> <p>Enable SaaS for Sub-Account (Formerly Location) based on the data provided</p> Write enable-saas-location-deprecated <div> <p>Enable SaaS for Sub-Account (Formerly Location) based on the data provided</p> Write import-courses Import Courses through public channels Write patch-agent Partially update an existing voice AI agent Write post-migrate-order-payment-status Process to migrate all the older orders and based on the statuses introduce the payment statuses as well Write put-location Update a Sub-Account (Formerly Location) based on the data provided Write schedule-invoice-schedule API to schedule an schedule invoice to start sending to the customer Write send-documents-contracts Send document to a client Write send-documents-contracts-template Send template to a client Write send-estimate API to send estimate by estimate id Write set-accounts Set Accounts Write set-google-locations Set google business locations Write text2pay-invoice API to create or update a text2pay invoice Write update-action Update an existing action for a voice AI agent. Modifies the behavior and configuration of an agent action. Write update-and-schedule-invoice-schedule API to update scheduled recurring invoice Write update-appointment-note Update Note Write update-association Update Association , Allows you to update labels of an associations. Documentation Link - https://doc.clickup. Write update-blog-post The Write update-business Update Business Write update-calendar Update calendar by ID. Write update-calendar-resource Update calendar resource by ID Write update-contact Please find the list of acceptable values for the \ Write update-conversation Update the conversation details based on the conversation ID Write update-coupon The Write update-custom-field <div> <p> Update Custom Field By Id </p> <div> <span style= Write update-custom-field-2 Update Custom Field Write update-custom-field-folder <div> <p> Create Custom Field Folder </p> <div> <span style= Write update-custom-object Update Custom Object Schema or standard object Write update-custom-value Update Custom Value Write update-display-priority API to set the display priority of products in a store Write update-estimate Update an existing estimate with new details Write update-estimate-last-visited-at API to update estimate last visited at by estimate id Write update-estimate-template Update an existing estimate template Write update-event-notification Update Event notification by id Write update-inventory The Update Inventory API allows the user to bulk update the inventory for multiple items. Use this endpoint to Write update-invoice API to update invoice by invoice id Write update-invoice-last-visited-at API to update invoice last visited at by invoice id Write update-invoice-late-fees-configuration API to update invoice late fees configuration by invoice id Write update-invoice-payment-methods-configuration API to update template late fees configuration by template id Write update-invoice-schedule API to update an schedule by schedule id Write update-invoice-template API to update an template by template id Write update-invoice-template-late-fees-configuration API to update template late fees configuration by template id Write update-link Update Link Write update-media-object Updates a single file or folder by ID Write update-message-status Post the necessary fields for the API to update message status. Write update-note Update Note Write update-object-record Update a Custom Object Record by Id. Supported Objects are business and custom objects. Documentation Link - h Write update-opportunity Update Opportunity Write update-opportunity-status Update Opportunity Status Write update-price-by-id-for-product The Write update-product-by-id The Write update-product-collection Update a specific product collection with Id :collectionId Write update-product-review Update status, reply, etc of a particular review Write update-rebilling Bulk update rebilling for given locationIds Write update-rebilling-deprecated Bulk update rebilling for given locationIds Write update-recurring-task Update Recurring Task Write update-redirect-by-id The Write update-shipping-carrier The Write update-shipping-rate The Write update-shipping-zone The Write update-store-status API to update the status of products in a particular store Write update-tag Update tag Write update-task Update Task Write update-task-completed Update Task Completed Write update-template Update a template Write update-user Update User Write upload-csv Upload CSV Write upload-file-attachments Post the necessary fields for the API to upload files. The files need to be a buffer with the key Write upload-file-customFields Uploads File to customFields Write upload-media-content If hosted is set to true then fileUrl is required. Else file is required. If adding a file, maximum allowed is Write upload-to-custom-fields Post the necessary fields for the API to upload files. The files need to be a buffer with the key Write upsert-contact Please find the list of acceptable values for the \ Write Upsert-opportunity Upsert Opportunity

READ 174 tools

Read active-numbers Retrieve a paginated list of active phone numbers for a specific location. Supports filtering, pagination, and Read check-url-slug-exists The Read download-message-transcription Download the recording transcription for a message by passing the message id Read fetch-calendar-resources List calendar resources by resource type and location ID Read fetch-campaigns Get Campaigns Read fetch-config API for fetching an existing payment config for given location Read fetch-media-content Fetches list of files and folders from the media library Read fetch-redirects-list Retrieves a list of all URL redirects based on the given query parameters. Read fetch-template Fetch email templates by location id Read filter-users-by-email Filter users by company ID, deleted status, and email array Read find-associations Get all Associations Read find-event-notification Find Event notification by notificationId Read get-access-token Use Access Tokens to access GoHighLevel resources on behalf of an authenticated location/company. Read get-account Get list of accounts and groups Read get-action Retrieve details of a specific action by its ID. Returns the action configuration including actionParameters. Read get-agency-plans Fetch all agency subscription plans for a given company ID Read get-agency-plans-deprecated Fetch all agency subscription plans for a given company ID Read get-agent Retrieve detailed configuration and settings for a specific voice AI agent Read get-agents Retrieve a paginated list of agents for given location. Read get-all-blog-authors-by-location The Read get-all-categories-by-location The Read get-all-notes Get All Notes Read GET-all-or-email-sms-templates GET all or email/sms templates Read get-all-tasks Get all Tasks Read get-appointment Get appointment by ID Read get-appointment-notes Get Appointment Notes Read get-appointments-for-contact Get Appointments for Contact Read get-association-by-ID Using this api you can get SYSTEM_DEFINED / USER_DEFINED association by id Read get-association-by-object-keys Get association by object keys like contacts, custom objects and opportunities. Documentation Link - https://d Read get-association-key-by-key-name Using this api you can get standard / user defined association by key Read get-available-shipping-zones This return available shipping rates for country based on order amount Read get-blocked-slots Get Blocked Slots Read get-blog-post The Read get-blogs The Read get-business Get Business Read get-businesses-by-location Get Businesses by Location Read get-calendar Get calendar by ID Read get-calendar-events Get Calendar Events Read get-calendar-resource Get calendar resource by ID Read get-calendars Get all calendars in a location. Read get-call-logs Returns call logs for Voice AI agents scoped to a location. Supports filtering by agent, contact, call type, a Read get-campaigns Get Campaigns Read get-categories-id Get categories by id Read get-categories-location-id Get categories by location id Read get-company Get Comapny Read get-contact Get Contact Read get-contacts Get Contacts Note: This API endpoint is deprecated. Please use the [Search Contacts](https://highlevel.stopl Read get-contacts-by-businessId Get Contacts By BusinessId Read get-conversation Get the conversation details based on the conversation ID Read get-coupon The Read get-csv-post Get CSV Post Read get-custom-field Get Custom Field Read get-custom-field-by-id <div> <p> Get Custom Field / Folder By Id.</p> <div> Read get-custom-fields Get Custom Fields Read get-custom-fields-by-object-key <div> <p> Get Custom Fields By Object Key</p> <div> < Read get-custom-menus Fetches a collection of custom menus based on specified criteria. This endpoint allows clients to retrieve cus Read get-custom-snapshots Get a list of all own and imported Snapshots Read get-custom-value Get Custom Value Read get-custom-values Get Custom Values Read get-duplicate-contact Get Duplicate Contact.<br/><br/>If \ Read get-email-by-id Get email by Id Read get-event-notification Get calendar notifications based on query Read get-facebook-page-group Get facebook pages Read get-forms Get Forms Read get-forms-submissions Get Forms Submissions Read get-google-locations Get google business locations Read get-groups Get all calendar groups in a location. Read get-instagram-page-group Get Instagram Professional Accounts Read get-installed-location This API allows you fetch location where app is installed upon Read get-installer-details Fetches installer details for the authenticated user. This endpoint returns information about the company, loc Read get-invoice API to get invoice by invoice id Read get-invoice-schedule API to get an schedule by schedule id Read get-invoice-template API to get an template by template id Read get-latest-snapshot-push Get Latest Snapshot Push Status for a location id Read get-link-by-id Get a single link by its ID Read get-linkedin-page-profile Get Linkedin pages and profile Read get-links Get Links Read get-list-inventory The Read get-location Get details of a Sub-Account (Formerly Location) by passing the sub-account id Read get-location-subscription Fetch subscription details for a specific location from location metadata Read get-location-subscription-deprecated Fetch subscription details for a specific location from location metadata Read get-location-tags Get Sub-Account (Formerly Location) Tags Read get-message Get message by message id. Read get-message-recording Get the recording for a message by passing the message id Read get-message-transcription Get the recording transcription for a message by passing the message id Read get-messages Get messages by conversation id. Read get-note Get Note Read get-object-by-location-id Get all objects for a location. Supported Objects are contact, opportunity, business and custom objects.To und Read get-object-schema-by-key Retrieve Object Schema by key or ID. This will return the schema of the custom object, including all its field Read get-opportunity Get Opportunity Read get-order-by-id The Read get-pipelines Get Pipelines Read get-post Get post Read get-posts Get Posts Read get-price-by-id-for-product The Read get-product-by-id The Read get-product-collection Internal API to fetch the Product Collections Read get-product-collection-id Get Details about individual product collection Read get-product-reviews API to fetch the Product Reviews Read get-product-store-stats API to fetch the total number of products, included in the store, and excluded from the store and other stats Read get-record-by-id Allows you to get a Standard Object like business and custom object record by Id Read get-recurring-task-by-id Get Recurring Task By Id Read get-relations-by-record-id Get all relations by record Id Read get-reviews-count API to fetch the Review Count as per status Read get-saas-locations Fetch all SaaS-activated locations for a company with pagination Read get-saas-locations-deprecated Fetch all SaaS-activated locations for a company with pagination Read get-saas-plan Fetch a specific SaaS plan by plan ID Read get-saas-plan-deprecated Fetch a specific SaaS plan by plan ID Read get-shipping-carriers The Read get-shipping-rates The Read get-shipping-zones The Read get-slots Get free slots for a calendar between a date range. Optionally a consumer can also request free slots in a par Read get-snapshot-push Get list of sub-accounts snapshot pushed in time period Read get-store-settings Get store settings by altId and altType. Read get-subscription-by-id The Read get-surveys Get Surveys Read get-surveys-submissions Get Surveys Submissions Read get-tag-by-id Get tag by id Read get-tags-by-ids Get tags by ids Read get-tags-location-id Get tags by location id Read get-task Get Task Read get-tiktok-business-profile Get Tiktok Business profile Read get-tiktok-profile Get Tiktok profile Read get-timezones Fetch the available timezones Read get-transaction-by-id The Read get-twitter-profile <div><div> <span style= Read get-upload-status Get Upload Status Read get-user Get User Read get-user-by-location Get User by Location Read get-workflow Get Workflow Read getCallLog Returns a call log by callId. Read getCharges Get all wallet charges Read getFunnels Retrieves a list of all funnels based on the given query parameters. Read getNumberPoolList Get list of number pools Read getPagesByFunnelId Retrieves a list of all funnel pages based on the given query parameters. Read getPagesCountByFunnelId Retrieves count of all funnel pages based on the given query parameters. Read getSpecificCharge Get specific wallet charge details Read hasFunds Check if account has sufficient funds Read list-coupons The Read list-documents-contracts List documents for a location Read list-documents-contracts-templates List document contract templates for a location Read list-estimate-templates Get a list of estimate templates or a specific template by ID Read list-estimates Get a paginated list of estimates Read list-integration-providers The Read list-invoice-schedules API to get list of schedules Read list-invoice-templates API to get list of templates Read list-invoices API to get list of invoices Read list-invoices-2 The Read list-order-fulfillment List all fulfillment history of an order Read list-order-notes List all notes of an order Read list-orders The Read list-prices-for-product The Read list-shipping-carriers The Read list-shipping-rates The Read list-shipping-zones The Read list-subscriptions The Read list-transactions The Read locations Get locations by stripeCustomerId or stripeSubscriptionId with companyId Read locations-deprecated Get locations by stripeCustomerId or stripeSubscriptionId with companyId Read preview-estimate-template Get a preview of an estimate template Read search-contacts-advanced Search contacts based on combinations of advanced filters. Documentation Link - https://doc.clickup.com/863100 Read search-conversation Returns a list of all conversations matching the search criteria along with the sort and filter options select Read search-locations Search Sub-Account (Formerly Location) Read search-object-records Supported Objects are custom objects and standard objects like Read search-opportunity Search Opportunity Read search-trigger-links Get list of links by searching Read search-users Search Users Read task-search Task Search Read validate-groups-slug Validate if group slug is available or not. Read verify-email Verify Email Read generate-estimate-number Get the next estimate number for the given location Read generate-invoice-number Get the next invoice number for the given location

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about GoHighLevel MCP Server

Can an AI agent move money through the GoHighLevel MCP Server MCP server? +

Yes. The GoHighLevel MCP Server server exposes 7 financial tools including charge, send-invoice, record-invoice. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the GoHighLevel MCP Server MCP server? +

Yes. The GoHighLevel MCP Server server exposes 60 destructive tools including bulk-delete-media-objects, bulk-delete-social-planner-posts, cancel-invoice-schedule. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through GoHighLevel MCP Server? +

The GoHighLevel MCP Server server has 158 write tools including remove-followers-contact, remove-followers-opportunity, remove-tags. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach GoHighLevel MCP Server.

How many tools does the GoHighLevel MCP Server MCP server expose? +