MCP Server Policy

GOOGLE WORKSPACE GMAIL (GWS CLI) MCP POLICY

Enforce policies on every tool call to the Google Workspace Gmail (gws CLI). 79 tools listed, categorised, and ready for rules.

gws mcp -s gmail 30 read 49 write 79 tools total
google-workspace gmail email google

GET STARTED

Download this policy scaffold and add your rules. Intercept enforces them on every tool call before it reaches Google Workspace Gmail (gws CLI).

terminal

# Download policy scaffold

curl -o google-workspace-gmail.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/google-workspace-gmail.yaml

# Run with Intercept

intercept --policy google-workspace-gmail.yaml -- npx -y @gws mcp -s gmail

Server documentation: https://github.com/googleworkspace/cli

READ TOOLS

30

WRITE TOOLS

37

DESTRUCTIVE TOOLS

12

POLICY YAML

This scaffold lists every tool with empty rules. Add conditions — rate limits, argument validation, deny rules — then deploy with Intercept.

google-workspace-gmail.yaml
version: "1"
description: "Policy for gws mcp -s gmail"
default: "allow"
tools:
    gmail_users_drafts_get:
        rules: []
    gmail_users_drafts_list:
        rules: []
    gmail_users_getProfile:
        rules: []
    gmail_users_history_list:
        rules: []
    gmail_users_labels_get:
        rules: []
    gmail_users_labels_list:
        rules: []
    gmail_users_messages_attachments_get:
        rules: []
    gmail_users_messages_get:
        rules: []
    gmail_users_messages_list:
        rules: []
    gmail_users_settings_cse_identities_get:
        rules: []
    gmail_users_settings_cse_identities_list:
        rules: []
    gmail_users_settings_cse_keypairs_get:
        rules: []
    gmail_users_settings_cse_keypairs_list:
        rules: []
    gmail_users_settings_delegates_get:
        rules: []
    gmail_users_settings_delegates_list:
        rules: []
    gmail_users_settings_filters_get:
        rules: []
    gmail_users_settings_filters_list:
        rules: []
    gmail_users_settings_forwardingAddresses_get:
        rules: []
    gmail_users_settings_forwardingAddresses_list:
        rules: []
    gmail_users_settings_getAutoForwarding:
        rules: []
    gmail_users_settings_getImap:
        rules: []
    gmail_users_settings_getLanguage:
        rules: []
    gmail_users_settings_getPop:
        rules: []
    gmail_users_settings_getVacation:
        rules: []
    gmail_users_settings_sendAs_get:
        rules: []
    gmail_users_settings_sendAs_list:
        rules: []
    gmail_users_settings_sendAs_smimeInfo_get:
        rules: []
    gmail_users_settings_sendAs_smimeInfo_list:
        rules: []
    gmail_users_threads_get:
        rules: []
    gmail_users_threads_list:
        rules: []
    gmail_users_drafts_create:
        rules: []
    gmail_users_drafts_send:
        rules: []
    gmail_users_drafts_update:
        rules: []
    gmail_users_labels_create:
        rules: []
    gmail_users_labels_patch:
        rules: []
    gmail_users_labels_update:
        rules: []
    gmail_users_messages_batchModify:
        rules: []
    gmail_users_messages_import:
        rules: []
    gmail_users_messages_insert:
        rules: []
    gmail_users_messages_modify:
        rules: []
    gmail_users_messages_send:
        rules: []
    gmail_users_messages_trash:
        rules: []
    gmail_users_messages_untrash:
        rules: []
    gmail_users_settings_cse_identities_create:
        rules: []
    gmail_users_settings_cse_identities_patch:
        rules: []
    gmail_users_settings_cse_keypairs_create:
        rules: []
    gmail_users_settings_cse_keypairs_disable:
        rules: []
    gmail_users_settings_cse_keypairs_enable:
        rules: []
    gmail_users_settings_delegates_create:
        rules: []
    gmail_users_settings_filters_create:
        rules: []
    gmail_users_settings_forwardingAddresses_create:
        rules: []
    gmail_users_settings_sendAs_create:
        rules: []
    gmail_users_settings_sendAs_patch:
        rules: []
    gmail_users_settings_sendAs_smimeInfo_insert:
        rules: []
    gmail_users_settings_sendAs_smimeInfo_setDefault:
        rules: []
    gmail_users_settings_sendAs_update:
        rules: []
    gmail_users_settings_sendAs_verify:
        rules: []
    gmail_users_settings_updateAutoForwarding:
        rules: []
    gmail_users_settings_updateImap:
        rules: []
    gmail_users_settings_updateLanguage:
        rules: []
    gmail_users_settings_updatePop:
        rules: []
    gmail_users_settings_updateVacation:
        rules: []
    gmail_users_stop:
        rules: []
    gmail_users_threads_modify:
        rules: []
    gmail_users_threads_trash:
        rules: []
    gmail_users_threads_untrash:
        rules: []
    gmail_users_watch:
        rules: []
    gmail_users_drafts_delete:
        rules: []
    gmail_users_labels_delete:
        rules: []
    gmail_users_messages_batchDelete:
        rules: []
    gmail_users_messages_delete:
        rules: []
    gmail_users_settings_cse_identities_delete:
        rules: []
    gmail_users_settings_cse_keypairs_obliterate:
        rules: []
    gmail_users_settings_delegates_delete:
        rules: []
    gmail_users_settings_filters_delete:
        rules: []
    gmail_users_settings_forwardingAddresses_delete:
        rules: []
    gmail_users_settings_sendAs_delete:
        rules: []
    gmail_users_settings_sendAs_smimeInfo_delete:
        rules: []
    gmail_users_threads_delete:
        rules: []

RELATED POLICIES

FREQUENTLY ASKED QUESTIONS

What tools does the Google Workspace Gmail (gws CLI) MCP server expose?

The Google Workspace Gmail (gws CLI) exposes 79 tools across 3 categories: Read, Write, Destructive. Each tool can be individually controlled with Intercept policies.

How do I enforce policies on Google Workspace Gmail (gws CLI)?

Download the policy scaffold, add rules (rate limits, argument validation, deny rules), then run Intercept as a proxy in front of the Google Workspace Gmail (gws CLI) MCP server. Every tool call is evaluated against your YAML policy before execution.

Is the Google Workspace Gmail (gws CLI) policy free to use?

Yes. All Intercept policies are open source under the Apache 2.0 licence. Download, modify, and deploy without restrictions.

ENFORCE POLICIES ON GOOGLE WORKSPACE GMAIL (GWS CLI)

Open source. One binary. Zero dependencies.