get_company

What get_company does on Twenty CRM MCP Server

AI agents call get_company to retrieve information from Twenty CRM MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_company is rated Low

This tool performs a straightforward data query operation that retrieves company information. It has no capability to modify, delete, or execute code. The only risk is potential exposure of sensitive company data if an AI agent queries companies it shouldn't access, but this is mitigated by typical authorization controls at the API level. No destructive, financial, or execute-level operations are involved.

From the tool's definition Tool name 'get_company' and description 'Get details of a specific company by ID' indicate retrieval of existing data without modification or side effects.

The rule that runs get_company safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Twenty CRM MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_company, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_company": {}
  }
}

Questions about get_company