# gmail_users_messages_list

List messages in the mailbox

Agent View of the PolicyLayer registry record for `gmail_users_messages_list`. HTML page: https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-list

## Facts

- Tool: `gmail_users_messages_list`
- Server: Google Workspace Gmail (gws CLI) (`@gws mcp -s gmail`) — https://policylayer.com/tools/google-workspace-gmail.md
- Install: `npx -y @gws mcp -s gmail`
- Homepage: https://www.npmjs.com/package/@gws mcp -s gmail
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "gmail_users_messages_list",
    "arguments": {}
  }
}
```

## Why gmail_users_messages_list is rated Low

This tool retrieves/queries existing messages from a mailbox without altering, deleting, or executing any operations. It is a straightforward read operation with minimal security risk, though it could expose sensitive email content if credentials are compromised or the tool is misused by an agent with overly broad access.

From the tool's own definition: "Tool name contains 'list' and description states 'List messages in the mailbox' — a retrieval operation with no modification or deletion."

## Use case

AI agents call gmail_users_messages_list to retrieve information from Google Workspace Gmail (gws CLI) without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Google Workspace Gmail (gws CLI):

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_users_messages_list": {}
  }
}
```

## Other tools on Google Workspace Gmail (gws CLI) (78)

- `gmail_users_drafts_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-drafts-delete.md
- `gmail_users_labels_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-labels-delete.md
- `gmail_users_messages_batchDelete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-batchdelete.md
- `gmail_users_messages_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-delete.md
- `gmail_users_settings_cse_identities_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-identities-delete.md
- `gmail_users_settings_cse_keypairs_obliterate` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-keypairs-obliterate.md
- `gmail_users_settings_delegates_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-delegates-delete.md
- `gmail_users_settings_filters_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-filters-delete.md
- `gmail_users_settings_forwardingAddresses_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-forwardingaddresses-delete.md
- `gmail_users_settings_sendAs_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-sendas-delete.md
- `gmail_users_settings_sendAs_smimeInfo_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-sendas-smimeinfo-delete.md
- `gmail_users_threads_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-threads-delete.md
- `gmail_users_messages_send` — Execute — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-send.md
- `gmail_users_drafts_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-drafts-get.md
- `gmail_users_drafts_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-drafts-list.md
- `gmail_users_getProfile` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-getprofile.md
- `gmail_users_history_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-history-list.md
- `gmail_users_labels_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-labels-get.md
- `gmail_users_labels_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-labels-list.md
- `gmail_users_messages_attachments_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-attachments-get.md
- `gmail_users_messages_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-get.md
- `gmail_users_settings_cse_identities_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-identities-get.md
- `gmail_users_settings_cse_identities_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-identities-list.md
- `gmail_users_settings_cse_keypairs_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-keypairs-get.md
- `gmail_users_settings_cse_keypairs_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-keypairs-list.md
- `gmail_users_settings_delegates_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-delegates-get.md
- `gmail_users_settings_delegates_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-delegates-list.md
- `gmail_users_settings_filters_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-filters-get.md
- `gmail_users_settings_filters_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-filters-list.md
- `gmail_users_settings_forwardingAddresses_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-forwardingaddresses-get.md
- …and 48 more: https://policylayer.com/tools/google-workspace-gmail.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=google-workspace-gmail · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/google-workspace-gmail