email_search_messages

What email_search_messages does on ScopeGate

AI agents call email_search_messages to retrieve information from ScopeGate without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why email_search_messages is rated Low

The tool retrieves and filters existing email messages based on search parameters. While it accesses potentially sensitive email content (Gmail integration via ScopeGate), it performs no write, execute, or destructive operations. Severity is elevated to medium due to the sensitive nature of email data that could be accessed, but remains in the Read category per the functional behavior.

From the tool's definition Tool name 'email_search_messages' and description 'Search email messages by criteria (from, to, subject, body, date range, read/unread status)' indicate retrieval/query of email data without modification or deletion.

The rule that runs email_search_messages safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ScopeGate, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For email_search_messages, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "email_search_messages": {}
  }
}

Questions about email_search_messages