memory_read_graph

What memory_read_graph does on VaultAssist

AI agents call memory_read_graph to retrieve information from VaultAssist without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why memory_read_graph is rated Low

The tool is a Read operation that accesses user data at scale ('entire user'). While it has no destructive capability, the severity is elevated to 'high' because it likely retrieves comprehensive personal information across Google Workspace services (emails, documents, calendar events, etc.), representing significant privacy exposure if misused by an untrusted agent.

From the tool's definition Tool name contains 'read' and description states 'Read and retrieve the entire user' - clearly a retrieval operation with no modification capability.

Risk signalsBulk/mass operation — affects multiple targets

The rule that runs memory_read_graph safely

PolicyLayer is an MCP gateway: it sits between your AI agents and VaultAssist, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For memory_read_graph, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "memory_read_graph": {}
  }
}

Questions about memory_read_graph