// MCP TOOL REFERENCE

Medium Risk

campaign.create

Create a new email marketing campaign (saved as draft).

Free to start. No card required.

WHEN AGENTS USE THIS TOOL

AI agents use campaign.create to create or modify resources in MisarMail. Write operations carry medium risk because an autonomous agent could trigger bulk unintended modifications. Rate limits prevent a single agent session from making hundreds of changes in rapid succession. Argument validation ensures the agent passes expected values.

Without a policy, an AI agent could call campaign.create repeatedly, creating or modifying resources faster than any human could review. PolicyLayer's rate limiting ensures write operations happen at a controlled pace, and argument validation catches malformed or unexpected inputs before they reach MisarMail.

RECOMMENDED POLICY

Write tools can modify data. A rate limit prevents runaway bulk operations from AI agents.

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "campaign.create": {
      "limits": [
        {
          "counter": "campaign.create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

See the full MisarMail policy for all 31 tools.

MORE MISARMAIL TOOLS

Execute automation.create Execute deliverability.audit Write abtest.create Write campaign.send Write channel.push_send Write contact.add Write contact.update Write email.send

View all 31 tools →

WHAT CAN GO WRONG

These attack patterns abuse exactly the kind of access campaign.create gives an agent. Each links to the full case and the policy that stops it:

Browse the full MCP Attack Database →

OTHER WRITE TOOLS

Other write tools across the catalogue. The same approach applies to each: rate-limit and validate the arguments.

Firecrawl Web Scraping Server firecrawl_generate_llmstxt AbraFlexi contact_create AbraFlexi contact_update AbraFlexi evidence_create AbraFlexi evidence_update AbraFlexi invoice_issued_update

FAQ

What does the campaign.create tool do? +

Create a new email marketing campaign (saved as draft).. It is categorised as a Write tool in the MisarMail MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on campaign.create? +

Register the MisarMail MCP server in PolicyLayer and add a rule for campaign.create: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MisarMail. Nothing to install.

What risk level is campaign.create? +

campaign.create is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit campaign.create? +

Yes. Add a rate_limit block to the campaign.create rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block campaign.create completely? +

Set action: deny in the PolicyLayer policy for campaign.create. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides campaign.create? +

campaign.create is provided by the MisarMail MCP server (https://mail.misar.io/api/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every MisarMail tool call.

Deterministic rules across all 31 MisarMail tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE MISARMAIL →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

campaign.create

// WHEN AGENTS USE THIS TOOL

// RECOMMENDED POLICY

// MORE MISARMAIL TOOLS

// WHAT CAN GO WRONG

// OTHER WRITE TOOLS

// RELATED READING

// FAQ