# mail_send_draft

Send an Apple Mail draft. Requires confirmation.

Agent View of the PolicyLayer registry record for `mail_send_draft`. HTML page: https://policylayer.com/tools/0xatrilla-apple-mcp/mail-send-draft

## Facts

- Tool: `mail_send_draft`
- Server: Apple Apps MCP (`0xatrilla/apple-mcp`) — https://policylayer.com/tools/0xatrilla-apple-mcp.md
- Homepage: https://github.com/0xatrilla/Apple-MCP
- Risk category: Write (Medium risk)
- Registry record: grade D, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "mail_send_draft",
    "arguments": {}
  }
}
```

## Why mail_send_draft is rated Medium

Sending email is a Write action (creates new data—sent messages and communications). Severity is high because an AI agent misusing this could send unauthorized emails, spam recipients, leak sensitive information, or damage reputation. However, it requires confirmation (stated in description), which mitigates risk slightly compared to unrestricted send capability.

From the tool's own definition: "Tool name 'mail_send_draft' and description 'Send an Apple Mail draft' indicates the tool creates and sends email messages. This is a write operation that modifies the mailbox state by adding sent messages and potentially affecting external recipients."

## Use case

AI agents use mail_send_draft to create or update resources in Apple Apps MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Apple Apps MCP environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Apple Apps MCP:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "mail_send_draft": {
      "limits": [
        {
          "counter": "mail_send_draft_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Apple Apps MCP (18)

- `music_pause` — Execute — https://policylayer.com/tools/0xatrilla-apple-mcp/music-pause.md
- `music_play` — Execute — https://policylayer.com/tools/0xatrilla-apple-mcp/music-play.md
- `shortcuts_run` — Execute — https://policylayer.com/tools/0xatrilla-apple-mcp/shortcuts-run.md
- `apple_permissions_status` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/apple-permissions-status.md
- `apple_request_permission` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/apple-request-permission.md
- `calendar_list_events` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/calendar-list-events.md
- `mail_read` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/mail-read.md
- `mail_search` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/mail-search.md
- `music_search` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/music-search.md
- `notes_read` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/notes-read.md
- `notes_search` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/notes-search.md
- `reminders_list` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/reminders-list.md
- `shortcuts_list` — Read — https://policylayer.com/tools/0xatrilla-apple-mcp/shortcuts-list.md
- `calendar_create_event` — Write — https://policylayer.com/tools/0xatrilla-apple-mcp/calendar-create-event.md
- `mail_create_draft` — Write — https://policylayer.com/tools/0xatrilla-apple-mcp/mail-create-draft.md
- `notes_create` — Write — https://policylayer.com/tools/0xatrilla-apple-mcp/notes-create.md
- `reminders_complete` — Write — https://policylayer.com/tools/0xatrilla-apple-mcp/reminders-complete.md
- `reminders_create` — Write — https://policylayer.com/tools/0xatrilla-apple-mcp/reminders-create.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=0xatrilla-apple-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/0xatrilla-apple-mcp