update_contact_group

What update_contact_group does on TrekMail MCP Server

AI agents use update_contact_group to create or update resources in TrekMail MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your TrekMail MCP Server environment.

Why update_contact_group is rated Medium

This tool creates or modifies data reversibly by updating contact group naming information. It does not delete, execute code, move financial assets, or perform irreversible operations. The medium severity reflects that while reversible, unauthorized modifications to contact groups could affect email distribution and organizational communication if misused by an AI agent without proper authorization checks.

From the tool's definition Tool description states 'Rename a contact group' which modifies metadata of an existing contact group. The operation is reversible (can be renamed again to restore original name).

The rule that runs update_contact_group safely

PolicyLayer is an MCP gateway: it sits between your AI agents and TrekMail MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For update_contact_group, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "update_contact_group": {
      "limits": [
        {
          "counter": "update_contact_group_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about update_contact_group