gws_drive_search

What gws_drive_search does on Iconnect

AI agents call gws_drive_search to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gws_drive_search is rated Low

This tool performs a read-only search query across Google Drive. It retrieves and returns information but does not create, modify, delete, or execute operations. The severity is medium rather than low because full-text search across all files could expose sensitive data if an AI agent searches for confidential information, though the tool itself is not inherently destructive or dangerous.

From the tool's definition Tool name 'gws_drive_search' and description 'Full-text search across Google Drive files by content or name' indicate a search operation that retrieves data without modifying it.

The rule that runs gws_drive_search safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gws_drive_search, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gws_drive_search": {}
  }
}

Questions about gws_drive_search