custom_get_user_invite

What custom_get_user_invite does on Marketo MCP Server

AI agents call custom_get_user_invite to retrieve information from Marketo MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why custom_get_user_invite is rated Low

This tool retrieves user invite data without modifying or deleting it. The word 'get' in the name and the absence of language indicating modification or destruction places it in the Read category. Severity is low because retrieving invite information has minimal blast radius unless the data itself is highly sensitive (user identities, contact info), but this is typical for Marketo systems.

From the tool's definition Tool name 'custom_get_user_invite' implies a GET/query operation that retrieves user invite information. The description states it 'Calls the Marketo REST API directly', and the lack of create/update/delete language suggests a read-only operation.

The rule that runs custom_get_user_invite safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Marketo MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For custom_get_user_invite, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "custom_get_user_invite": {}
  }
}

Questions about custom_get_user_invite