hubspot_get_contact

What hubspot_get_contact does on ScopeGate

AI agents call hubspot_get_contact to retrieve information from ScopeGate without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why hubspot_get_contact is rated Low

This tool retrieves a single contact record from HubSpot by its identifier. It performs a query/fetch operation with no modification, deletion, or execution of external code. While contact data may be sensitive in some contexts, the tool itself is a straightforward read operation with minimal blast radius if misused—it would only expose information already in the system.

From the tool's definition Tool name 'hubspot_get_contact' and description 'Get a contact by ID' indicate a retrieval operation with no side effects. The verb 'get' is explicitly a read operation that fetches existing data.

The rule that runs hubspot_get_contact safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ScopeGate, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For hubspot_get_contact, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "hubspot_get_contact": {}
  }
}

Questions about hubspot_get_contact