get-contacts-by-businessId

What get-contacts-by-businessId does on GoHighLevel MCP Server

AI agents call get-contacts-by-businessId to retrieve information from GoHighLevel MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get-contacts-by-businessId is rated Low

This tool retrieves or queries contact data filtered by a business ID. It performs no data modification, deletion, or execution of external operations. While contacts may contain sensitive information, the tool itself is a standard read/retrieval operation with no side effects. Severity is low because unauthorized access to contacts, while concerning, is less critical than write, execute, or destructive operations.

From the tool's definition Tool name 'get-contacts-by-businessId' and description 'Get Contacts By BusinessId' indicate a retrieval operation. The verb 'get' and lack of modification language confirm read-only behavior.

The rule that runs get-contacts-by-businessId safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GoHighLevel MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get-contacts-by-businessId, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get-contacts-by-businessId": {}
  }
}

Questions about get-contacts-by-businessId