authListScopes

What authListScopes does on Google Drive

AI agents call authListScopes to retrieve information from Google Drive without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why authListScopes is rated Low

This tool retrieves authentication and authorization metadata (scopes) from the Google Drive integration. It performs no mutations, creates no side effects, and only displays what scopes have been configured and granted. This is a pure Read operation with minimal security risk—the information returned is about permissions themselves rather than sensitive user data or files.

From the tool's definition Tool name 'authListScopes' and description 'List configured/requested scopes and currently granted scopes' indicate a query/retrieval operation that returns configuration and permission state without modifying any data.

The rule that runs authListScopes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Google Drive, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For authListScopes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "authListScopes": {}
  }
}

Questions about authListScopes