salesforce_get_leads

What salesforce_get_leads does on Freshdesk

AI agents call salesforce_get_leads to retrieve information from Freshdesk without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why salesforce_get_leads is rated Low

This tool queries and retrieves lead records from Salesforce with optional filters. It has no side effects—it only reads and returns existing data. The result limit and filter options confirm it is a safe read-only operation. Severity is low because unauthorized lead data access poses minimal operational risk, though it could expose PII depending on data sensitivity in a given context.

From the tool's definition Tool name and description indicate data retrieval: 'Get leads' with filter parameters (name_contains, company_contains, email_contains, status) and a result limit (max 200, default 50). No modification, deletion, or execution verbs present.

The rule that runs salesforce_get_leads safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Freshdesk, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For salesforce_get_leads, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "salesforce_get_leads": {}
  }
}

Questions about salesforce_get_leads