# crm_search_leads

Search leads with lead-specific filters

Agent View of the PolicyLayer registry record for `crm_search_leads`. HTML page: https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-search-leads

## Facts

- Tool: `crm_search_leads`
- Server: HubSpot MCP (`blacksand-software/hubspot-mcp`) — https://policylayer.com/tools/blacksand-software-hubspot-mcp.md
- Homepage: https://github.com/BlackSand-Software/hubspot-mcp
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "crm_search_leads",
    "arguments": {}
  }
}
```

## Why crm_search_leads is rated Low

This tool performs a search operation to retrieve lead records matching specified criteria. Search operations are read-only and have no side effects on data. The blast radius of misuse is minimal—an attacker could access lead information they may not be authorized to view, but cannot modify, delete, or execute actions.

From the tool's own definition: "Tool name 'crm_search_leads' and description 'Search leads with lead-specific filters' indicate a query/search operation that retrieves data without modifying it."

## Use case

AI agents call crm_search_leads to retrieve information from HubSpot MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches HubSpot MCP:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "crm_search_leads": {}
  }
}
```

## Other tools on HubSpot MCP (110)

- `calls_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/calls-archive.md
- `calls_batch_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/calls-batch-archive.md
- `crm_batch_delete_associations` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-batch-delete-associations.md
- `crm_batch_delete_objects` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-batch-delete-objects.md
- `crm_delete_association` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-delete-association.md
- `crm_delete_object` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-delete-object.md
- `emails_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/emails-archive.md
- `emails_batch_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/emails-batch-archive.md
- `engagement_details_delete` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/engagement-details-delete.md
- `meetings_batch_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/meetings-batch-archive.md
- `meetings_delete` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/meetings-delete.md
- `notes_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/notes-archive.md
- `notes_batch_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/notes-batch-archive.md
- `products_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/products-archive.md
- `products_batch_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/products-batch-archive.md
- `tasks_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/tasks-archive.md
- `tasks_batch_archive` — Destructive — https://policylayer.com/tools/blacksand-software-hubspot-mcp/tasks-batch-archive.md
- `calls_batch_read` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/calls-batch-read.md
- `calls_get` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/calls-get.md
- `calls_list` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/calls-list.md
- `calls_search` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/calls-search.md
- `communications_get_preferences` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/communications-get-preferences.md
- `communications_get_subscription_definitions` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/communications-get-subscription-definitions.md
- `communications_get_subscription_status` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/communications-get-subscription-status.md
- `crm_get_associations` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-get-associations.md
- `crm_get_company` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-get-company.md
- `crm_get_company_properties` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-get-company-properties.md
- `crm_get_contact` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-get-contact.md
- `crm_get_contact_properties` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-get-contact-properties.md
- `crm_get_lead` — Read — https://policylayer.com/tools/blacksand-software-hubspot-mcp/crm-get-lead.md
- …and 80 more: https://policylayer.com/tools/blacksand-software-hubspot-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=blacksand-software-hubspot-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/blacksand-software-hubspot-mcp