# hubspot_search_notes Search notes in HubSpot by content or properties. Agent View of the PolicyLayer registry record for `hubspot_search_notes`. HTML page: https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-search-notes ## Facts - Tool: `hubspot_search_notes` - Server: HubSpot MCP Server (`adeel0x01/hubspot-mcp-tools`) — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools.md - Homepage: https://github.com/adeel0x01/hubspot-mcp-tools - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Allowed ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "hubspot_search_notes", "arguments": {} } } ``` ## Why hubspot_search_notes is rated Low The tool performs a search/query operation to retrieve existing notes based on search criteria. It has no side effects, does not modify, delete, or execute any operations. Searching is a read-only retrieval operation with minimal blast radius even if misused, as it only exposes data already in HubSpot. From the tool's own definition: "Tool name is 'search_notes' and description states it 'Search notes in HubSpot by content or properties' — this is a query operation that retrieves data without modification." ## Use case AI agents call hubspot_search_notes to retrieve information from HubSpot MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches HubSpot MCP Server: ```json { "version": "1", "default": "deny", "tools": { "hubspot_search_notes": {} } } ``` ## Other tools on HubSpot MCP Server (81) - `hubspot_delete_association` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-association.md - `hubspot_delete_call` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-call.md - `hubspot_delete_company` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-company.md - `hubspot_delete_contact` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-contact.md - `hubspot_delete_deal` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-deal.md - `hubspot_delete_email_engagement` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-email-engagement.md - `hubspot_delete_meeting` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-meeting.md - `hubspot_delete_note` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-note.md - `hubspot_delete_task` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-task.md - `hubspot_delete_ticket` — Destructive — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-delete-ticket.md - `hubspot_enroll_contact_in_workflow` — Execute — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-enroll-contact-in-workflow.md - `hubspot_get_association_types` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-association-types.md - `hubspot_get_associations` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-associations.md - `hubspot_get_call` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-call.md - `hubspot_get_company` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-company.md - `hubspot_get_contact` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-contact.md - `hubspot_get_deal` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-deal.md - `hubspot_get_email_engagement` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-email-engagement.md - `hubspot_get_meeting` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-meeting.md - `hubspot_get_note` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-note.md - `hubspot_get_object_notes` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-object-notes.md - `hubspot_get_owner` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-owner.md - `hubspot_get_pipeline` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-pipeline.md - `hubspot_get_pipeline_stage` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-pipeline-stage.md - `hubspot_get_pipeline_stages` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-pipeline-stages.md - `hubspot_get_pipelines` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-pipelines.md - `hubspot_get_properties` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-properties.md - `hubspot_get_property` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-property.md - `hubspot_get_property_groups` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-property-groups.md - `hubspot_get_task` — Read — https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools/hubspot-get-task.md - …and 51 more: https://policylayer.com/tools/adeel0x01-hubspot-mcp-tools.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=adeel0x01-hubspot-mcp-tools · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/adeel0x01-hubspot-mcp-tools