# reply_all_email Reply to all recipients of an email. Agent View of the PolicyLayer registry record for `reply_all_email`. HTML page: https://policylayer.com/tools/0xka13b-microsoft-mcps/reply-all-email ## Facts - Tool: `reply_all_email` - Server: Microsoft MCP (`0xka13b/microsoft-mcps`) — https://policylayer.com/tools/0xka13b-microsoft-mcps.md - Homepage: https://github.com/0xka13b/microsoft-mcps - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 3 (2 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `body` | string | yes | Reply body | | `email_id` | string | yes | Message ID to reply-all to | | `body_type` | string | no | Body content type. Defaults to text. | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "reply_all_email", "arguments": { "body": "", "email_id": "" } } } ``` ## Why reply_all_email is rated Medium This tool sends an email reply to all recipients of an existing email. It creates new outbound messages, which is a Write operation. The severity is high because an AI agent could accidentally or maliciously send replies to a large group of recipients, potentially leaking sensitive information or causing reputational/organizational harm at scale ('reply all' storms, unintended disclosure). From the tool's own definition: "Reply to all recipients of an email" Risk signals: Accepts raw HTML/template content (body) ## Use case AI agents use reply_all_email to create or update resources in Microsoft MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Microsoft MCP environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Microsoft MCP: ```json { "version": "1", "default": "deny", "tools": { "reply_all_email": { "limits": [ { "counter": "reply_all_email_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Microsoft MCP (13) - `delete_email` — Destructive — https://policylayer.com/tools/0xka13b-microsoft-mcps/delete-email.md - `get_attachment` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/get-attachment.md - `get_email` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/get-email.md - `list_emails` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/list-emails.md - `me` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/me.md - `search_emails` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/search-emails.md - `unified_search` — Read — https://policylayer.com/tools/0xka13b-microsoft-mcps/unified-search.md - `create_email_draft` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/create-email-draft.md - `create_reply_draft` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/create-reply-draft.md - `move_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/move-email.md - `reply_to_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/reply-to-email.md - `send_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/send-email.md - `update_email` — Write — https://policylayer.com/tools/0xka13b-microsoft-mcps/update-email.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=0xka13b-microsoft-mcps · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/0xka13b-microsoft-mcps