# raw_request

Escape hatch to call any Google Drive API v3 path directly, for requests the typed tools don't cover — e.g. revisions ("drive/v3/files/<fileId>/revisions"), changes ("drive/v3/changes?pageToken=..."), shortcut creation (POST "drive/v3/files" with shortcutDetails), emptying the trash (DELETE "drive/v3/files/trash"), generateIds, or starting a resumable upload session (POST "upload/drive/v3/files?uploadType=resumable"). The path is relative to https://www.googleapis.com and may carry a query string (remember supportsAllDrives=true for shared-drive items). The Bearer token is added automatically; the method defaults to GET; the response must be JSON (binary media downloads belong to download_file/export_file).

Agent View of the PolicyLayer registry record for `raw_request`. HTML page: https://policylayer.com/tools/a1-x-tech-mcp-google-drive/raw-request

## Facts

- Tool: `raw_request`
- Server: Mcp Google Drive (`@a1-x-tech/mcp-google-drive`) — https://policylayer.com/tools/a1-x-tech-mcp-google-drive.md
- Install: `npx -y @a1-x-tech/mcp-google-drive`
- Homepage: https://github.com/A1-x-Tech/mcp-google-drive
- Risk category: Destructive (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 3 (1 required)
- Recommended policy verdict: Hidden

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `body` | object | no | JSON request body (POST/PATCH only). |
| `path` | string | yes | API path relative to https://www.googleapis.com, e.g. "drive/v3/files/<fileId>/revisions?fields=*". |
| `method` | string | no | HTTP method (the Drive API uses these four). Defaults to GET. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "raw_request",
    "arguments": {
      "path": "<path>"
    }
  }
}
```

## Why raw_request is rated Critical

An AI agent that decides to call raw_request doesn't hesitate, doesn't double-check, and doesn't stop at one. Whatever it removes from Mcp Google Drive is gone. There is no undo for destructive operations.

Risk signals: Accepts file system path (path) · Accepts raw HTML/template content (body)

## Use case

AI agents call raw_request to permanently remove resources in Mcp Google Drive, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

## Recommended policy (PolicyLayer)

Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Mcp Google Drive:

```json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "raw_request"
  ]
}
```

## Other tools on Mcp Google Drive (14)

- `delete_file_forever` — Destructive — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/delete-file-forever.md
- `manage_comments` — Destructive — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/manage-comments.md
- `manage_permissions` — Destructive — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/manage-permissions.md
- `trash_file` — Destructive — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/trash-file.md
- `download_file` — Read — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/download-file.md
- `get_file` — Read — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/get-file.md
- `list_shared_drives` — Read — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/list-shared-drives.md
- `search_files` — Read — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/search-files.md
- `copy_file` — Write — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/copy-file.md
- `create_folder` — Write — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/create-folder.md
- `export_file` — Write — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/export-file.md
- `move_file` — Write — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/move-file.md
- `update_file_metadata` — Write — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/update-file-metadata.md
- `upload_file` — Write — https://policylayer.com/tools/a1-x-tech-mcp-google-drive/upload-file.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=a1-x-tech-mcp-google-drive · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/a1-x-tech-mcp-google-drive