# gmail_users_settings_cse_identities_list

List client-side encryption identities

Agent View of the PolicyLayer registry record for `gmail_users_settings_cse_identities_list`. HTML page: https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-identities-list

## Facts

- Tool: `gmail_users_settings_cse_identities_list`
- Server: Google Workspace Gmail (gws CLI) (`@gws mcp -s gmail`) — https://policylayer.com/tools/google-workspace-gmail.md
- Install: `npx -y @gws mcp -s gmail`
- Homepage: https://www.npmjs.com/package/@gws mcp -s gmail
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "gmail_users_settings_cse_identities_list",
    "arguments": {}
  }
}
```

## Why gmail_users_settings_cse_identities_list is rated Low

This tool retrieves and enumerates CSE (client-side encryption) identity configurations from Gmail settings. It performs read-only access to metadata about encryption identities without side effects. No data is modified, deleted, executed, or financially impacted. The blast radius of misuse is limited to information disclosure about encryption identities, which is low severity.

From the tool's own definition: "Tool name contains 'list' and description states 'List client-side encryption identities' — a pure retrieval operation with no modification, deletion, or execution."

## Use case

AI agents call gmail_users_settings_cse_identities_list to retrieve information from Google Workspace Gmail (gws CLI) without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Google Workspace Gmail (gws CLI):

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_users_settings_cse_identities_list": {}
  }
}
```

## Other tools on Google Workspace Gmail (gws CLI) (78)

- `gmail_users_drafts_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-drafts-delete.md
- `gmail_users_labels_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-labels-delete.md
- `gmail_users_messages_batchDelete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-batchdelete.md
- `gmail_users_messages_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-delete.md
- `gmail_users_settings_cse_identities_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-identities-delete.md
- `gmail_users_settings_cse_keypairs_obliterate` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-keypairs-obliterate.md
- `gmail_users_settings_delegates_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-delegates-delete.md
- `gmail_users_settings_filters_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-filters-delete.md
- `gmail_users_settings_forwardingAddresses_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-forwardingaddresses-delete.md
- `gmail_users_settings_sendAs_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-sendas-delete.md
- `gmail_users_settings_sendAs_smimeInfo_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-sendas-smimeinfo-delete.md
- `gmail_users_threads_delete` — Destructive — https://policylayer.com/tools/google-workspace-gmail/gmail-users-threads-delete.md
- `gmail_users_messages_send` — Execute — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-send.md
- `gmail_users_drafts_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-drafts-get.md
- `gmail_users_drafts_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-drafts-list.md
- `gmail_users_getProfile` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-getprofile.md
- `gmail_users_history_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-history-list.md
- `gmail_users_labels_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-labels-get.md
- `gmail_users_labels_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-labels-list.md
- `gmail_users_messages_attachments_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-attachments-get.md
- `gmail_users_messages_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-get.md
- `gmail_users_messages_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-messages-list.md
- `gmail_users_settings_cse_identities_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-identities-get.md
- `gmail_users_settings_cse_keypairs_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-keypairs-get.md
- `gmail_users_settings_cse_keypairs_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-cse-keypairs-list.md
- `gmail_users_settings_delegates_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-delegates-get.md
- `gmail_users_settings_delegates_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-delegates-list.md
- `gmail_users_settings_filters_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-filters-get.md
- `gmail_users_settings_filters_list` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-filters-list.md
- `gmail_users_settings_forwardingAddresses_get` — Read — https://policylayer.com/tools/google-workspace-gmail/gmail-users-settings-forwardingaddresses-get.md
- …and 48 more: https://policylayer.com/tools/google-workspace-gmail.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=google-workspace-gmail · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/google-workspace-gmail