update_note

What update_note does on Twenty CRM MCP Server

AI agents use update_note to create or update resources in Twenty CRM MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Twenty CRM MCP Server environment.

Why update_note is rated Medium

This tool modifies data (a note record) but does so reversibly. It falls under the Write category since it creates or modifies data without permanent destruction. Severity is medium because an AI agent misusing this could corrupt important notes or customer interaction records, but the impact is limited to a single note and remains recoverable. Confidence is high based on clear, unambiguous naming and description.

From the tool's definition Tool name 'update_note' and description 'Update an existing note' indicate modification of existing data. The action is reversible (notes can be updated again or reverted), and there is no permanent deletion or irreversible data loss.

The rule that runs update_note safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Twenty CRM MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_note, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_note": {
      "limits": [
        {
          "counter": "update_note_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_note