crm_run_ai_workflow

Execute an AI Workflow (Agent Studio agent). Send a message and get a response. Maintains conversation context via executionId.

SERVER0nmcp SOURCE0nmcp

High RISK CLASS

Category Execute

Parameters 00 required

Recommended Rate-limitedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/io-github-0nork-0nmcp/crm-run-ai-workflow.md

WHAT IT DOES

What crm_run_ai_workflow does on 0nmcp

AI agents invoke crm_run_ai_workflow to trigger actions in 0nmcp. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

RISK

Why crm_run_ai_workflow is rated High

This tool executes arbitrary AI workflows/agents with effects determined by the user-supplied message and the target workflow. While it doesn't directly delete data or move money, it can trigger side effects through whatever logic the workflow implements. The high severity reflects that a compromised or malicious workflow could perform destructive, financial, or other harmful operations.

From the tool's definition 'Execute an AI Workflow (Agent Studio agent)' and 'Send a message and get a response' with 'maintains conversation context' indicates running external code/agents whose effects depend on the workflow content and input arguments.

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs crm_run_ai_workflow safely

PolicyLayer is an MCP gateway: it sits between your AI agents and 0nmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For crm_run_ai_workflow, this is the rule to start with:

crm_run_ai_workflow Rate-limited

crm_run_ai_workflow stays usable, but rate-capped: a runaway agent can't fire it dozens of times a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "crm_run_ai_workflow": {
      "limits": [
        {
          "counter": "crm_run_ai_workflow_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

RATE-LIMIT THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect 0nmcp, apply this rule, and every crm_run_ai_workflow call is checked against it from then on.

FAQ

Questions about crm_run_ai_workflow

What does the crm_run_ai_workflow tool do? +

Execute an AI Workflow (Agent Studio agent). Send a message and get a response. Maintains conversation context via executionId. It is categorised as a Execute tool in the 0nmcp MCP Server, which means it can trigger actions or run processes. Use rate limits and argument validation.

How do I enforce a policy on crm_run_ai_workflow? +

Register the 0n MCP server in PolicyLayer and add a rule for crm_run_ai_workflow: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches 0nmcp. Nothing to install.

What risk level is crm_run_ai_workflow? +

crm_run_ai_workflow is a Execute tool with high risk. Execute tools should be rate-limited and have argument validation enabled.

Can I rate-limit crm_run_ai_workflow? +

Yes. Add a rate_limit block to the crm_run_ai_workflow rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block crm_run_ai_workflow completely? +

Set action: deny in the PolicyLayer policy for crm_run_ai_workflow. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides crm_run_ai_workflow? +

crm_run_ai_workflow is provided by the 0n MCP server (0nmcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on 0n, and thousands of servers like it.

This server

All 218 0n tools → High-risk tools on this server →

Across the catalogue

run on 0sec →shortcuts_run on Apple Apps MCP →run_emba_scan on EMBA-MCP → All high-risk MCP tools → The MCP Attack Database →

Guides

Govern code and CI agents →Agent sandbox →Least privilege for MCP →