wa_search_contact

What wa_search_contact does on WA MCP

AI agents call wa_search_contact to retrieve information from WA MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why wa_search_contact is rated Low

The tool retrieves contact information from a local cache without side effects. It is a straightforward read operation that matches the Read category definition (retrieves or queries data; no side effects). While it accesses potentially sensitive contact data, the severity is low because the tool itself does not modify state, execute commands, or cause irreversible changes.

From the tool's definition Tool description states it 'Search contacts by name or phone number. Returns matching contacts from the local cache.' This is a query operation with no modification, creation, or deletion of data.

The rule that runs wa_search_contact safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WA MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For wa_search_contact, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wa_search_contact": {}
  }
}

Questions about wa_search_contact