GOOGLESUPER_PATCH_LABEL

Patches the specified label.

SERVERGoogle Super SOURCEgooglesuper

Medium RISK CLASS

Category Write

Parameters 60 required

Recommended Rate-limitedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/googlesuper/googlesuper-patch-label.md

WHAT IT DOES

What GOOGLESUPER_PATCH_LABEL does on Google Super

AI agents use GOOGLESUPER_PATCH_LABEL to create or update resources in Google Super, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Google Super environment.

Parameter	Type	Required	Description
`id`	string	—	The ID of the label to update.
`name`	string	—	The display name of the label.
`color`	object	—	The color to assign to the label. Color is only available for labels that have their `type` set to `user`.
`userId`	string	—	The user's email address. The special value `me` can be used to indicate the authenticated user.
`labelListVisibility`	string	—	The visibility of the label in the label list in the Gmail web interface.
`messageListVisibility`	string	—	The visibility of messages with this label in the message list in the Gmail web interface.

Parameters from the server's own tool schema.

RISK

Why GOOGLESUPER_PATCH_LABEL is rated Medium

PATCH operations are reversible modifications of existing resources. In Gmail/Google Workspace context, patching a label could modify its properties (name, color, visibility settings, etc.). This is a Write operation rather than Destructive since patches are reversible and the tool does not delete data.

From the tool's definition Tool name contains 'PATCH' which indicates modification of existing data (the 'specified label'). Description states 'Patches the specified label' confirming it modifies rather than deletes.

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs GOOGLESUPER_PATCH_LABEL safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Google Super, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For GOOGLESUPER_PATCH_LABEL, this is the rule to start with:

GOOGLESUPER_PATCH_LABEL Rate-limited

GOOGLESUPER_PATCH_LABEL stays usable, but capped: an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "GOOGLESUPER_PATCH_LABEL": {
      "limits": [
        {
          "counter": "googlesuper_patch_label_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect Google Super, apply this rule, and every GOOGLESUPER_PATCH_LABEL call is checked against it from then on.

FAQ

Questions about GOOGLESUPER_PATCH_LABEL

What does the GOOGLESUPER_PATCH_LABEL tool do? +

Patches the specified label. It is categorised as a Write tool in the Google Super MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

What parameters does GOOGLESUPER_PATCH_LABEL accept? +

GOOGLESUPER_PATCH_LABEL accepts 6 parameters: id, name, color, userId, labelListVisibility, messageListVisibility. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on GOOGLESUPER_PATCH_LABEL? +

Register the Google Super MCP server in PolicyLayer and add a rule for GOOGLESUPER_PATCH_LABEL: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Google Super. Nothing to install.

What risk level is GOOGLESUPER_PATCH_LABEL? +

GOOGLESUPER_PATCH_LABEL is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit GOOGLESUPER_PATCH_LABEL? +

Yes. Add a rate_limit block to the GOOGLESUPER_PATCH_LABEL rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block GOOGLESUPER_PATCH_LABEL completely? +

Set action: deny in the PolicyLayer policy for GOOGLESUPER_PATCH_LABEL. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides GOOGLESUPER_PATCH_LABEL? +

GOOGLESUPER_PATCH_LABEL is provided by the Google Super MCP server (googlesuper). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on Google Super, and thousands of servers like it.

This server

All 200 Google Super tools →

Across the catalogue

create-label on Meme MCP Server → The MCP Attack Database →

Guides

Govern customer-ops agents →Argument validation →Scoped token →