create_email_draft
Create a new, standalone draft email that can be edited and sent later. Use this only for starting a fresh message — to draft a reply within an existing conversation thread, use create_reply_draft instead.
This record as markdown: /tools/0xka13b-microsoft-mcps/create-email-draft.md
What create_email_draft does on Microsoft MCP
AI agents use create_email_draft to create or update resources in Microsoft MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Microsoft MCP environment.
| Parameter | Type | Required | Description |
|---|---|---|---|
cc | array | — | CC recipients |
to | array | Yes | Recipient email addresses |
bcc | array | — | BCC recipients |
body | string | Yes | Email body |
subject | string | Yes | Email subject |
body_type | string | — | Body content type. Defaults to text. |
attachments | array | — | File attachments |
Parameters from the server's own tool schema.
Why create_email_draft is rated Medium
The tool creates new data (a draft email) without permanently committing it or executing external operations. It is reversible because drafts exist in an unpublished state and can be modified or deleted.
From the tool's definition create_email_draft creates a new draft email message that can be edited and sent later. This is an explicitly Write operation — creating new data (an email draft) reversibly, as drafts can be edited, discarded, or modified before sending.
Risk signalsAccepts raw HTML/template content (body) · High parameter count (10 properties)
Attacks that exploit this kind of access
The rule that runs create_email_draft safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Microsoft MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_email_draft, this is the rule to start with:
create_email_draft stays usable, but capped: an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.
The button opens the PolicyLayer dashboard: create your workspace, connect Microsoft MCP, apply this rule, and every create_email_draft call is checked against it from then on.
Questions about create_email_draft
Create a new, standalone draft email that can be edited and sent later. Use this only for starting a fresh message — to draft a reply within an existing conversation thread, use create_reply_draft instead. It is categorised as a Write tool in the Microsoft MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.
create_email_draft accepts 7 parameters: cc, to, bcc, body, subject, body_type, attachments. Required: to, body, subject. The full parameter table on this page comes from the server's own tool schema.
Register the Microsoft MCP server in PolicyLayer and add a rule for create_email_draft: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Microsoft MCP. Nothing to install.
create_email_draft is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.
Yes. Add a rate_limit block to the create_email_draft rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for create_email_draft. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
create_email_draft is provided by the Microsoft MCP server (0xka13b/microsoft-mcps). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Microsoft, and thousands of servers like it.
This server
Across the catalogue