search_contacts

What search_contacts does on Iconnect

AI agents call search_contacts to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_contacts is rated Low

This tool queries existing contact data and returns results without creating, modifying, deleting, or executing external operations. It is a standard read operation with minimal risk—exposure of contact information is a privacy concern but not a direct security vulnerability when the tool itself is limited to search.

From the tool's definition Tool name is 'search_contacts' and description states it 'Search[es] contacts by name, email, phone, or organization.' The verb 'search' and the parameters (name, email, phone, organization) indicate a retrieval operation with no modification or deletion of…

The rule that runs search_contacts safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_contacts, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_contacts": {}
  }
}

Questions about search_contacts