gmail_users_settings_sendAs_update

What gmail_users_settings_sendAs_update does on Google Workspace Gmail (gws CLI)

AI agents use gmail_users_settings_sendAs_update to create or update resources in Google Workspace Gmail (gws CLI), usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Google Workspace Gmail (gws CLI) environment.

Why gmail_users_settings_sendAs_update is rated Medium

This tool modifies Gmail account configuration (send-as aliases) in a reversible manner. While it doesn't create permanent destructive changes, allowing an AI to modify email sending identities poses a medium-severity risk: it could enable email spoofing, impersonation, or sending emails that appear to come from different addresses without the user's knowledge.

From the tool's definition Tool name contains 'update' and description states 'Update a send-as alias', indicating modification of Gmail settings that change how emails are sent from an account.

Risk signalsModifies send-as alias settings

The rule that runs gmail_users_settings_sendAs_update safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Google Workspace Gmail (gws CLI), and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_users_settings_sendAs_update, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_users_settings_sendAs_update": {
      "limits": [
        {
          "counter": "gmail_users_settings_sendas_update_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about gmail_users_settings_sendAs_update