contact_enrich · DataMerge MCP: Risk & Policy

WHAT IT DOES

What contact_enrich does on DataMerge MCP

AI agents use contact_enrich to create or update resources in DataMerge MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your DataMerge MCP environment.

WHY IT NEEDS A POLICY

Why contact_enrich needs a policy

This tool initiates an enrichment operation via HTTP POST, creating an asynchronous job that modifies or augments contact records with additional data. It is a Write operation as it creates/updates enriched data in the system. The blast radius is medium since it affects contact records and may trigger external data lookups, but it does not delete data or involve financial transactions.

From the tool's definition POST /v1/contact/enrich — starts an enrichment job for contacts by LinkedIn URL or name+domain, returns a job_id (async, 202)

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

contact_enrich Rate-limited

contact_enrich stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "contact_enrich": {
      "limits": [
        {
          "counter": "contact_enrich_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches DataMerge MCP, so you can run agents against it safely.

FAQ

Questions about contact_enrich

What does the contact_enrich tool do? +

POST /v1/contact/enrich. Enrich specific contacts by LinkedIn URL or name+domain. Returns a job_id (async, 202). It is categorised as a Write tool in the DataMerge MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on contact_enrich? +

Register the DataMerge MCP server in PolicyLayer and add a rule for contact_enrich: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches DataMerge MCP. Nothing to install.

What risk level is contact_enrich? +

contact_enrich is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit contact_enrich? +

Yes. Add a rate_limit block to the contact_enrich rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block contact_enrich completely? +

Set action: deny in the PolicyLayer policy for contact_enrich. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides contact_enrich? +

contact_enrich is provided by the DataMerge MCP server (poolside-ventures/datamerge-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.