communications_update_subscription_status

What communications_update_subscription_status does on HubSpot MCP

AI agents use communications_update_subscription_status to create or update resources in HubSpot MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your HubSpot MCP environment.

Why communications_update_subscription_status is rated Medium

This tool modifies contact data (subscription status) reversibly rather than deleting it. While affecting multiple contacts elevates severity due to blast radius (users could unsubscribe all contacts from critical communications), it remains Write rather than Execute/Destructive because the change is reversible and does not execute arbitrary code or irreversibly delete data.

From the tool's definition Tool name 'communications_update_subscription_status' and description 'Update subscription status for multiple contacts' indicate modifying contact communication preferences, which is a reversible state change affecting multiple records.

The rule that runs communications_update_subscription_status safely

PolicyLayer is an MCP gateway: it sits between your AI agents and HubSpot MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For communications_update_subscription_status, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "communications_update_subscription_status": {
      "limits": [
        {
          "counter": "communications_update_subscription_status_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about communications_update_subscription_status