findOneNote

What findOneNote does on Twenty MCP Server

AI agents call findOneNote to retrieve information from Twenty MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why findOneNote is rated Low

This tool retrieves a single note by its identifier (likely with optional depth parameter for nested data). It performs a read-only query with no side effects, no data creation or modification, and no irreversible actions. The blast radius of misuse is minimal—worst case an agent retrieves unintended note content, which is a data exposure concern but not operationally destructive.

From the tool's definition Tool name 'findOneNote' and description 'can be provided to request your note' indicate a retrieval operation. The verb 'find' combined with 'One' and the phrasing 'request your note' clearly describe a query/fetch action with no modification or deletion.

The rule that runs findOneNote safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Twenty MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For findOneNote, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "findOneNote": {}
  }
}

Questions about findOneNote