crm_search_objects

What crm_search_objects does on HubSpot MCP

AI agents call crm_search_objects to retrieve information from HubSpot MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why crm_search_objects is rated Low

This tool retrieves or queries CRM data without side effects. Search operations are classified as Read category. Severity is low because unauthorized search access, while concerning for privacy, does not directly compromise data integrity or enable destructive actions. The HubSpot CRM context suggests access to business contact and deal data, but search alone cannot modify or delete records.

From the tool's definition Tool name 'crm_search_objects' with description 'Search CRM objects using filters' indicates a query/search operation. The sibling tools show a pattern of read (list, get, search), write (create, update), and batch operations.

The rule that runs crm_search_objects safely

PolicyLayer is an MCP gateway: it sits between your AI agents and HubSpot MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For crm_search_objects, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "crm_search_objects": {}
  }
}

Questions about crm_search_objects