# create_email_draft Create a new, standalone draft email that can be edited and sent later. Use this only for starting a fresh message — to draft a reply within an existing conversation thread, use create_reply_draft instead. Agent View of the PolicyLayer registry record for `create_email_draft`. HTML page: https://policylayer.com/tools/0xka13b-microsoft-mcps/create-email-draft ## Facts - Tool: `create_email_draft` - Server: Microsoft MCP (`0xka13b/microsoft-mcps`) — https://policylayer.com/tools/0xka13b-microsoft-mcps.md - Homepage: https://github.com/0xka13b/microsoft-mcps - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 7 (3 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `cc` | array | no | CC recipients | | `to` | array | yes | Recipient email addresses | | `bcc` | array | no | BCC recipients | | `body` | string | yes | Email body | | `subject` | string | yes | Email subject | | `body_type` | string | no | Body content type. Defaults to text. | | `attachments` | array | no | File attachments | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "create_email_draft", "arguments": { "to": [], "body": "", "subject": "" } } } ``` ## Why create_email_draft is rated Medium The tool creates new data (a draft email) without permanently committing it or executing external operations. It is reversible because drafts exist in an unpublished state and can be modified or deleted. From the tool's own definition: "create_email_draft creates a new draft email message that can be edited and sent later. This is an explicitly Write operation — creating new data (an email draft) reversibly, as drafts can be edited, discarded, or modified before sending." Risk signals: Accepts raw HTML/template content (body) · High parameter count (10 properties) ## Use case AI agents use create_email_draft to create or update resources in Microsoft MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Microsoft MCP environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Microsoft MCP: ```json { "version": "1", "default": "deny", "tools": { "create_email_draft": { "limits": [ { "counter": "create_email_draft_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Microsoft MCP (13) - `delete_email` — Destructive — https://policylayer.com/tools/0xka13b-microsoft-mcps/delete-email.md - `get_attachment` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/get-attachment.md - `get_email` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/get-email.md - `list_emails` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/list-emails.md - `me` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/me.md - `search_emails` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/search-emails.md - `unified_search` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/unified-search.md - `create_reply_draft` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/create-reply-draft.md - `move_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/move-email.md - `reply_all_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/reply-all-email.md - `reply_to_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/reply-to-email.md - `send_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/send-email.md - `update_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/update-email.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=0xka13b-microsoft-mcps · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/0xka13b-microsoft-mcps