Critical-risk tools in Mcp Gmail

Critical severity Mcp Gmail MCP Server 4 of 32 tools

4 of the 32 tools in Mcp Gmail are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

gmail_draft_delete Destructive

Permanently delete a draft. Idempotent on the outcome (already-deleted drafts return 404 from Gmail).
gmail_label_delete Destructive

Delete a user label entirely. The label disappears from every message that had it (the messages themselves are untouched). System labels (INBOX, SENT, etc.) cannot be deleted.
gmail_message_trash Destructive

Move a message to Trash via
gmail_thread_trash Destructive

Move every message in a thread to Trash via

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Critical-risk tools in Mcp Gmail

Tools at critical risk

Attacks that target this class

More on Mcp Gmail

Enforce policy on every Mcp Gmail tool call.