// SCAN REPORT

Lawruler

15 tools. 14 can modify or destroy data without limits.

14 write tools that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

14 can modify or destroy data

1 read-only

15 tools total

Community server · catalogue entry verified 03/07/2026

How to control Lawruler ↓

TOOL MAP

What Lawruler exposes to your agents

Read (1) Write / Execute (14) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Lawruler tools

Write · Medium add_conversation_note This tool creates or appends new conversation notes to an existing lead record, which is a reversible write operation. Write · Medium add_tags_to_lead This tool modifies lead metadata by adding tags, which is a reversible write operation. Write · Medium create_lead This tool creates new records in a legal CRM, which is a reversible write operation (records can be edited or deleted later). Write · Medium create_lead_full The tool creates new records in the LawRuler CRM system, which is a reversible write operation.

14 of Lawruler's 15 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Lawruler

PolicyLayer is an MCP gateway — it sits between your AI agents and Lawruler, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "add_conversation_note": {
    "limits": [
      {
        "counter": "add_conversation_note_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_lead": {
    "limits": [
      {
        "counter": "get_lead_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Lawruler — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON LAWRULER →

Instant setup, no code required.

FULL CATALOGUE

All 15 Lawruler tools

WRITE 14 tools

Write add_conversation_note Add a conversation note or chat transcript to a lead. Write add_tags_to_lead Add tags to a lead. For multiple tags, separate with commas: 'New, Level 1, High Value'. Write create_lead Create a new lead/intake. FirstName+LastName or FullName required. CellPhone and Email strongly recommended. Write create_lead_full Create a new lead/intake with full field set including address, DOB, and contact preferences. Write create_lead_obo Create a lead with duplicate checking disabled (for On-Behalf-Of cases where the same contact has multiple mat Write set_custom_field Set a custom field on a lead. field_name is the API parameter name (e.g., custom2413). Write update_lead_assignee Assign a lead/intake to a staff member (LeadAssignee — the user managing the lead). Write update_lead_case_type Update the case type of a lead/intake (e.g., Auto Accident, Workers Compensation, Divorce). Write update_lead_contact_info Update contact information fields on a lead (phone, email, address). Write update_lead_fields Update multiple fields on an existing lead at once. custom_fields_json accepts a JSON object of field_name:val Write update_lead_language Update the preferred language for a lead (e.g., Spanish, French, Mandarin). Write update_lead_owner Set the owner of a lead/intake (LeadOwner — the attorney or partner who owns the matter). Write update_lead_status Update the status of a lead/intake. Write update_lead_summary Update the case description/summary for a lead.

READ 1 tools

Read get_lead Retrieve a lead/intake by LeadID. Returns contact info, status, case type, and all stored fields.

FAQ

Questions about Lawruler

How do I prevent bulk modifications through Lawruler? +

The Lawruler server has 14 write tools including add_conversation_note, add_tags_to_lead, create_lead. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Lawruler.

How many tools does the Lawruler MCP server expose? +

15 tools across 2 categories: Read, Write. 1 are read-only. 14 can modify, create, or delete data.

How do I enforce a policy on Lawruler? +

Register the Lawruler MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Lawruler tool call.

Deterministic rules across all 15 Lawruler tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON LAWRULER →

Instant setup, no code required.

15 Lawruler tools catalogued and risk-classified — across an index of 43,000+ MCP servers.