crm_create_object

What crm_create_object does on HubSpot MCP

AI agents use crm_create_object to create or update resources in HubSpot MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your HubSpot MCP environment.

Why crm_create_object is rated Medium

This tool creates new records in a live CRM database. While creation is technically reversible (unlike deletion), it commits data to production and could result in spam contacts, fraudulent companies, or fake deals if misused by an AI agent. Classified as Write (not Execute or Destructive) because it creates data reversibly rather than executing arbitrary code or permanently destroying data.

From the tool's definition Tool name 'crm_create_object' with description 'Create a new CRM object' indicates irreversible creation of new data in a CRM system. In context of HubSpot managing contacts, companies, deals, leads, and engagements, this creates persistent records.

The rule that runs crm_create_object safely

PolicyLayer is an MCP gateway: it sits between your AI agents and HubSpot MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For crm_create_object, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "crm_create_object": {
      "limits": [
        {
          "counter": "crm_create_object_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about crm_create_object