wa_block_contact

What wa_block_contact does on WA MCP

AI agents use wa_block_contact to create or update resources in WA MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your WA MCP environment.

Why wa_block_contact is rated Medium

Blocking a contact is a write operation that modifies user preferences and contact metadata reversibly. It has medium severity because misuse could disrupt communications by blocking legitimate contacts, but the action is easily undone by unblocking. It does not involve financial transactions, code execution, or irreversible data destruction, placing it in the Write category rather than higher-severity ones.

From the tool's definition Tool description states 'Block a WhatsApp contact' — this modifies the contact relationship/blocking status, a reversible state change. The action prevents message receipt but does not delete data or execute arbitrary commands.

The rule that runs wa_block_contact safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WA MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For wa_block_contact, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wa_block_contact": {
      "limits": [
        {
          "counter": "wa_block_contact_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about wa_block_contact