custom_invite_user

What custom_invite_user does on Marketo MCP Server

AI agents use custom_invite_user to create or update resources in Marketo MCP Server, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Marketo MCP Server environment.

Why custom_invite_user is rated Medium

The tool name suggests it creates or initiates a user invitation, which is a Write operation (reversible). The empty description lowers confidence slightly, but the action aligns with user management in a Marketo context. Severity is medium because unauthorized user creation could grant access to marketing assets and customer data, but this is less severe than destructive operations or financial transactions.

From the tool's definition Tool name 'custom_invite_user' indicates creation of a user invitation or account setup action. In the context of a Marketo MCP server managing marketing assets and user access, this creates a new user record or sends an invitation (reversible write…

The rule that runs custom_invite_user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Marketo MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For custom_invite_user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "custom_invite_user": {
      "limits": [
        {
          "counter": "custom_invite_user_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about custom_invite_user