gmail_users_settings_delegates_list

What gmail_users_settings_delegates_list does on Google Workspace Gmail (gws CLI)

AI agents call gmail_users_settings_delegates_list to retrieve information from Google Workspace Gmail (gws CLI) without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gmail_users_settings_delegates_list is rated Low

This tool retrieves a list of mailbox delegates (users granted access to another user's mailbox). While it is a read operation with no direct side effects, the information retrieved—delegate identities and their access levels—could be sensitive in a workplace context. An AI agent misusing this could enumerate delegation relationships to identify high-value accounts or social engineering targets.

From the tool's definition Tool name includes 'list' and description states 'List mailbox delegates' — a read-only query operation that retrieves delegate information without modifying data.

The rule that runs gmail_users_settings_delegates_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Google Workspace Gmail (gws CLI), and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_users_settings_delegates_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_users_settings_delegates_list": {}
  }
}

Questions about gmail_users_settings_delegates_list