search_directory

What search_directory does on MCP Google Contacts Server

AI agents call search_directory to retrieve information from MCP Google Contacts Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_directory is rated Low

Search functions query and retrieve data (contacts and directory information) without modifying, deleting, or executing external operations. This is a Read operation. Severity is medium rather than low because search on Google Workspace directories could expose organizational structure, employee contact details, or sensitive contact information if an agent misuses it or is manipulated into returning unauthorized…

From the tool's definition Tool name 'search_directory' indicates a search operation, and the server description mentions 'searching' contacts and 'accessing Google Workspace directories.' The empty description limits confidence, but search operations typically retrieve data without…

The rule that runs search_directory safely

PolicyLayer is an MCP gateway: it sits between your AI agents and MCP Google Contacts Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_directory, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_directory": {}
  }
}

Questions about search_directory