notes_update

What notes_update does on HubSpot MCP

AI agents use notes_update to create or update resources in HubSpot MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your HubSpot MCP environment.

Why notes_update is rated Medium

The tool modifies existing note records in HubSpot CRM, making it a Write operation. It is not Destructive because updates are reversible. Severity is medium because a compromised AI agent could alter notes that impact business processes, customer records, or deal management, but the impact is limited to modification rather than deletion or financial transactions.

From the tool's definition Tool name 'notes_update' and description 'Update an existing note' indicate modification of existing data in HubSpot CRM. The 'update' operation is reversible (data can be reverted to previous state) and does not delete or create new records.

The rule that runs notes_update safely

PolicyLayer is an MCP gateway: it sits between your AI agents and HubSpot MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For notes_update, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "notes_update": {
      "limits": [
        {
          "counter": "notes_update_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about notes_update