mail_send_draft

What mail_send_draft does on Apple Apps MCP

AI agents use mail_send_draft to create or update resources in Apple Apps MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Apple Apps MCP environment.

Why mail_send_draft is rated Medium

Sending email is a Write action (creates new data—sent messages and communications). Severity is high because an AI agent misusing this could send unauthorized emails, spam recipients, leak sensitive information, or damage reputation. However, it requires confirmation (stated in description), which mitigates risk slightly compared to unrestricted send capability.

From the tool's definition Tool name 'mail_send_draft' and description 'Send an Apple Mail draft' indicates the tool creates and sends email messages. This is a write operation that modifies the mailbox state by adding sent messages and potentially affecting external recipients.

The rule that runs mail_send_draft safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Apple Apps MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mail_send_draft, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mail_send_draft": {
      "limits": [
        {
          "counter": "mail_send_draft_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about mail_send_draft