update_contact

What update_contact does on Iconnect

AI agents use update_contact to create or update resources in Iconnect, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Iconnect environment.

Why update_contact is rated Medium

This tool modifies contact data in the Apple ecosystem (likely Contacts app on macOS). Updates are reversible operations that change existing records without destroying data or executing arbitrary code. The risk is medium because unauthorized contact modification could enable social engineering, fraud, or privacy violations, but the impact is limited to contact metadata and the changes can be undone.

From the tool's definition Tool name 'update_contact' and description 'Update contact properties' indicate modification of existing contact data. The phrase 'Only specified fields are changed' confirms reversible, targeted modification rather than deletion or creation.

The rule that runs update_contact safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_contact, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_contact": {
      "limits": [
        {
          "counter": "update_contact_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_contact