gmail_users_settings_updateVacation

What gmail_users_settings_updateVacation does on Google Workspace Gmail (gws CLI)

AI agents use gmail_users_settings_updateVacation to create or update resources in Google Workspace Gmail (gws CLI), usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Google Workspace Gmail (gws CLI) environment.

Why gmail_users_settings_updateVacation is rated Medium

This tool modifies user account settings (vacation responder configuration) but does not delete data or execute arbitrary code. The change is reversible—vacation settings can be re-configured or disabled. Severity is medium because misconfiguration could cause unintended auto-replies to senders, affecting communication but not causing data loss or financial harm.

From the tool's definition Tool name 'updateVacation' and description 'Update vacation responder settings' indicate modification of user settings; operation is reversible (vacation settings can be disabled or updated again).

Risk signalsAuto-replies to incoming email

The rule that runs gmail_users_settings_updateVacation safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Google Workspace Gmail (gws CLI), and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_users_settings_updateVacation, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_users_settings_updateVacation": {
      "limits": [
        {
          "counter": "gmail_users_settings_updatevacation_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about gmail_users_settings_updateVacation