# m365_send_email Use this when the user wants to send from their Microsoft 365 / Outlook account via the cloud — requires a connected M365 account. Shows a preview first — set confirm=true to actually send. For sending from an account configured in the Mac's Mail.app, use send_email. Agent View of the PolicyLayer registry record for `m365_send_email`. HTML page: https://policylayer.com/tools/com-local-mcp-local-mcp/m365-send-email ## Facts - Tool: `m365_send_email` - Server: Local (`local-mcp`) — https://policylayer.com/tools/com-local-mcp-local-mcp.md - Install: `npx -y local-mcp` - Homepage: https://github.com/lanchuske/local-mcp - Risk category: Write (Medium risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server CORS policy: * - Server rate-limited: no - Parameters: 5 (3 required) - Recommended policy verdict: Rate-limited ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `cc` | string | no | CC recipients (optional, comma-separated) | | `to` | string | yes | Recipient email address. For multiple, separate with commas. | | `body` | string | yes | Email body (plain text) | | `confirm` | boolean | no | Set to true to actually send (default: shows preview only) | | `subject` | string | yes | Email subject | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "m365_send_email", "arguments": { "to": "", "body": "", "subject": "" } } } ``` ## Why m365_send_email is rated Medium Sending email is a write operation that creates new messages and sends them to recipients. While reversible (emails can be unsent/recalled in some cases), the tool has significant blast radius: an AI agent could send emails to arbitrary recipients, impersonate the user, spread misinformation, or facilitate phishing/fraud. From the tool's own definition: "Tool name 'm365_send_email' and description explicitly states 'send from their Microsoft 365 / Outlook account' and 'set confirm=true to actually send'. This creates and transmits email messages, a reversible write operation." Risk signals: Accepts raw HTML/template content (body) ## Use case AI agents use m365_send_email to create or update resources in Local, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Local environment. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Local: ```json { "version": "1", "default": "deny", "tools": { "m365_send_email": { "limits": [ { "counter": "m365_send_email_rate", "window": "minute", "max": 30, "scope": "grant" } ] } } } ``` ## Other tools on Local (233) - `delete_calendar_event` — Destructive — https://policylayer.com/tools/com-local-mcp-local-mcp/delete-calendar-event.md - `delete_reminder` — Destructive — https://policylayer.com/tools/com-local-mcp-local-mcp/delete-reminder.md - `delete_reminder_list` — Destructive — https://policylayer.com/tools/com-local-mcp-local-mcp/delete-reminder-list.md - `m365_delete_event` — Destructive — https://policylayer.com/tools/com-local-mcp-local-mcp/m365-delete-event.md - `onedrive_delete_file` — Destructive — https://policylayer.com/tools/com-local-mcp-local-mcp/onedrive-delete-file.md - `recipe_delete` — Destructive — https://policylayer.com/tools/com-local-mcp-local-mcp/recipe-delete.md - `chrome_click` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-click.md - `chrome_evaluate_js` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-evaluate-js.md - `chrome_fill_form` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-fill-form.md - `chrome_go_back` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-go-back.md - `chrome_navigate` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-navigate.md - `chrome_type` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-type.md - `chrome_wait_for` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/chrome-wait-for.md - `nordvpn_diagnose` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/nordvpn-diagnose.md - `notion_open_page` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/notion-open-page.md - `recipe_run` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/recipe-run.md - `run_diagnostics` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/run-diagnostics.md - `run_terminal_command` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/run-terminal-command.md - `safari_click` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-click.md - `safari_evaluate_js` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-evaluate-js.md - `safari_fill_form` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-fill-form.md - `safari_go_back` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-go-back.md - `safari_navigate` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-navigate.md - `safari_query_selector_all` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-query-selector-all.md - `safari_type` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-type.md - `safari_wait_for` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/safari-wait-for.md - `screen_record_start` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/screen-record-start.md - `screen_record_stop` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/screen-record-stop.md - `setup_install` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/setup-install.md - `ui_click` — Execute — https://policylayer.com/tools/com-local-mcp-local-mcp/ui-click.md - …and 203 more: https://policylayer.com/tools/com-local-mcp-local-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-local-mcp-local-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-local-mcp-local-mcp