emails_get

What emails_get does on HubSpot MCP

AI agents call emails_get to retrieve information from HubSpot MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why emails_get is rated Low

This tool retrieves email details from the HubSpot CRM system without altering, deleting, or executing any operations. It is a straightforward read operation that queries data. The blast radius of misuse is minimal—an attacker could retrieve email content but cannot modify systems, execute code, delete data, or trigger financial transactions. Low severity is appropriate for information disclosure in a CRM context.

From the tool's definition Tool name 'emails_get' and description 'Get details of a specific email' indicate retrieval of existing data with no modification, deletion, or execution capability.

The rule that runs emails_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and HubSpot MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For emails_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "emails_get": {}
  }
}

Questions about emails_get