send_button_response · WhatsApp MCP Automation MCP

WHAT IT DOES

What send_button_response does on WhatsApp MCP Automation

AI agents use send_button_response to create or update resources in WhatsApp MCP Automation — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your WhatsApp MCP Automation environment.

WHY IT NEEDS A POLICY

Why send_button_response needs a policy

The tool appears to create and send a response message with button interactions, which is a reversible write operation that modifies chat state by adding a message. While it doesn't permanently delete data (not Destructive), it does create new data artifacts. Severity is medium because misuse could spam messages or send unintended responses to contacts, but lacks financial impact or code execution risk.

From the tool's definition Tool name 'send_button_response' indicates sending/writing a response via buttons in WhatsApp. The server context shows it provides interactive messaging capabilities (polls, events, group features). Empty description limits precision.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

send_button_response Rate-limited

send_button_response stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "send_button_response": {
      "limits": [
        {
          "counter": "send_button_response_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches WhatsApp MCP Automation, so you can run agents against it safely.

FAQ

Questions about send_button_response

What does the send_button_response tool do? +

send_button_response. It is categorised as a Write tool in the WhatsApp MCP Automation MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on send_button_response? +

Register the WhatsApp MCP Automation MCP server in PolicyLayer and add a rule for send_button_response: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches WhatsApp MCP Automation. Nothing to install.

What risk level is send_button_response? +

send_button_response is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit send_button_response? +

Yes. Add a rate_limit block to the send_button_response rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block send_button_response completely? +

Set action: deny in the PolicyLayer policy for send_button_response. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides send_button_response? +

send_button_response is provided by the WhatsApp MCP Automation MCP server (priyasogani8-star/whatsapp-mcp-automation). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.