GoHighLevel MCP Server
UnverifiedREPObasicmachines-co/open-ghl-mcp
F
Catalogue entry updated 5 days ago
Auth postureNot probedno remote endpoint probed yet
Tools649 Destructive · 1 Execute · 25 Write · 29 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 9Execute 1Write 25Read 29
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 64
delete_appointmentdelete_contactdelete_contact_notedelete_contact_taskdelete_custom_field
View all 64 tools
delete_custom_valuedelete_opportunitydelete_userremove_contact_from_workflowghl_requestadd_contact_tagsadd_contact_to_workflowcomplete_contact_taskcreate_appointmentcreate_contactcreate_contact_notecreate_contact_taskcreate_conversationcreate_custom_fieldcreate_custom_valuecreate_opportunitycreate_userremove_contact_tagssend_messageupdate_appointmentupdate_contactupdate_contact_noteupdate_contact_taskupdate_custom_fieldupdate_custom_valueupdate_message_statusupdate_opportunityupdate_opportunity_statusupdate_userupload_form_filedebug_configget_all_form_submissionsget_appointmentget_appointmentsget_calendarget_calendarsget_contactget_contact_noteget_contact_notesget_contact_taskget_contact_tasksget_conversationget_conversationsget_custom_fieldget_custom_fieldsget_custom_valueget_custom_valuesget_formsget_free_slotsget_messagesget_opportunitiesget_opportunityget_pipelinesget_userget_users_by_locationget_workflowsghl_list_endpointssearch_contactssearch_users
Change history
No change history on record for this server.
Recommended policy
delete_appointmentdeny
ghl_requestrequire approval
add_contact_tagsrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →