manage_webhooks

What manage_webhooks does on Fathom Fyi

AI agents use manage_webhooks to create or update resources in Fathom Fyi, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Fathom Fyi environment.

Why manage_webhooks is rated Medium

Removing webhooks is a reversible write operation—configurations can be recreated. It does not permanently destroy data, make financial transactions, or execute arbitrary code. However, it modifies system state by altering registered webhook handlers, which could disrupt monitoring or alerting if misused. Medium severity reflects that webhook removal affects system configuration but remains reversible.

From the tool's definition Tool performs modification operations: 'remove one by ID' indicates deletion/modification of webhook configurations. 'List all registered webhooks' is read-only, but the tool's primary function is management (removal) of webhooks.

The rule that runs manage_webhooks safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fathom Fyi, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For manage_webhooks, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "manage_webhooks": {
      "limits": [
        {
          "counter": "manage_webhooks_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about manage_webhooks