email_list_messages

What email_list_messages does on ScopeGate

AI agents call email_list_messages to retrieve information from ScopeGate without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why email_list_messages is rated Low

This tool performs a retrieval operation on email metadata only, with no side effects. It does not modify, delete, execute, or commit financial actions. The restriction to envelope data (headers only, no body) further limits its impact. Classification as Read is appropriate; severity is low because exposure of email metadata, while sensitive, does not enable destructive or financial harm directly.

From the tool's definition Tool description states it 'List email messages in a mailbox' and 'Returns envelope data (subject, from, to, date) without the full body.' This is a pure read operation that retrieves message metadata without modification, deletion, or execution.

The rule that runs email_list_messages safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ScopeGate, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For email_list_messages, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "email_list_messages": {}
  }
}

Questions about email_list_messages