# pipedrive_upload_product_image

Upload an image for a product. Provide the image via EITHER file_path OR base64_data (exactly one required). Supports png, jpeg, gif, and webp. Note: file_path is read by the SERVER process via the filesystem and is disabled by default; the operator must set PIPEDRIVE_IMAGE_BASE_DIR and the path must resolve within it; otherwise use base64_data, which is transport-safe.

Agent View of the PolicyLayer registry record for `pipedrive_upload_product_image`. HTML page: https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-upload-product-image

## Facts

- Tool: `pipedrive_upload_product_image`
- Server: Pipedrive MCP Server (`ckalima/pipedrive-mcp-server`) — https://policylayer.com/tools/ckalima-pipedrive-mcp-server.md
- Homepage: https://github.com/ckalima/pipedrive-mcp-server
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "pipedrive_upload_product_image",
    "arguments": {}
  }
}
```

## Why pipedrive_upload_product_image is rated Medium

This tool creates or modifies product image data in Pipedrive CRM, which is a reversible operation (images can be replaced or deleted later). It does not execute arbitrary code, delete data irreversibly, move money, or perform other more severe actions. The blast radius is contained to product image metadata within the CRM.

From the tool's own definition: "Tool performs 'Upload' operation which 'creates or modifies data reversibly' by adding/updating product images in the Pipedrive CRM system."

## Use case

AI agents use pipedrive_upload_product_image to create or update resources in Pipedrive MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Pipedrive MCP Server environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Pipedrive MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "pipedrive_upload_product_image": {
      "limits": [
        {
          "counter": "pipedrive_upload_product_image_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Pipedrive MCP Server (154)

- `pipedrive_convert_deal_to_lead` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-convert-deal-to-lead.md
- `pipedrive_delete_activity` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-activity.md
- `pipedrive_delete_board` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-board.md
- `pipedrive_delete_deal` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal.md
- `pipedrive_delete_deal_discount` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal-discount.md
- `pipedrive_delete_deal_field` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal-field.md
- `pipedrive_delete_deal_field_options` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal-field-options.md
- `pipedrive_delete_deal_follower` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal-follower.md
- `pipedrive_delete_deal_installment` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal-installment.md
- `pipedrive_delete_deal_product` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-deal-product.md
- `pipedrive_delete_lead` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-lead.md
- `pipedrive_delete_note` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-note.md
- `pipedrive_delete_organization` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-organization.md
- `pipedrive_delete_organization_field` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-organization-field.md
- `pipedrive_delete_organization_field_options` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-organization-field-options.md
- `pipedrive_delete_organization_follower` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-organization-follower.md
- `pipedrive_delete_person` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-person.md
- `pipedrive_delete_person_field` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-person-field.md
- `pipedrive_delete_person_field_options` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-person-field-options.md
- `pipedrive_delete_person_follower` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-person-follower.md
- `pipedrive_delete_phase` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-phase.md
- `pipedrive_delete_pipeline` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-pipeline.md
- `pipedrive_delete_product` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-product.md
- `pipedrive_delete_product_field` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-product-field.md
- `pipedrive_delete_product_field_options` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-product-field-options.md
- `pipedrive_delete_product_follower` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-product-follower.md
- `pipedrive_delete_product_image` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-product-image.md
- `pipedrive_delete_product_variation` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-product-variation.md
- `pipedrive_delete_project` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-project.md
- `pipedrive_delete_stage` — Destructive — https://policylayer.com/tools/ckalima-pipedrive-mcp-server/pipedrive-delete-stage.md
- …and 124 more: https://policylayer.com/tools/ckalima-pipedrive-mcp-server.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=ckalima-pipedrive-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/ckalima-pipedrive-mcp-server