crm_list_merge_proposals

What crm_list_merge_proposals does on Munin

AI agents call crm_list_merge_proposals to retrieve information from Munin without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why crm_list_merge_proposals is rated Low

This tool retrieves or lists existing merge proposals from a CRM system. It performs a read-only query with no side effects, no data modification, and no irreversible actions. The blast radius of misuse is minimal—an attacker could view proposal data but cannot alter, delete, or execute operations. Confidence is high despite incomplete description because the 'list' verb strongly indicates a Read operation.

From the tool's definition Tool name 'crm_list_merge_proposals' and description 'List CRM merge proposals' indicate a retrieval/query operation with no modification or deletion of data.

The rule that runs crm_list_merge_proposals safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Munin, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For crm_list_merge_proposals, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "crm_list_merge_proposals": {}
  }
}

Questions about crm_list_merge_proposals