bitrix24_create_company

What bitrix24_create_company does on Allmcp

AI agents use bitrix24_create_company to create or update resources in Allmcp, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Allmcp environment.

Why bitrix24_create_company is rated Medium

Creating a company record is a write operation that adds data to a system. It is reversible (can be deleted via corresponding delete tools) and does not execute arbitrary code or move money. The medium severity reflects that creating unauthorized business records could cause operational confusion, but the impact is limited to data creation rather than deletion or financial transactions.

From the tool's definition Tool name indicates 'create_company' which creates new data in a business system (Bitrix24 CRM). No description provided, but the pattern matches sibling tools like 'altegio_create_appointment' and 'altegio_create_client' which are reversible write operations.

The rule that runs bitrix24_create_company safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Allmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bitrix24_create_company, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bitrix24_create_company": {
      "limits": [
        {
          "counter": "bitrix24_create_company_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about bitrix24_create_company