gws_gmail_read

What gws_gmail_read does on Iconnect

AI agents call gws_gmail_read to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gws_gmail_read is rated Low

This tool purely retrieves existing email data without creating, modifying, deleting, or executing any operations. It is a straightforward query operation that accesses Gmail message content. The severity is low because reading email is a common, non-destructive operation, though exposing email access to an AI agent could carry privacy risks if the agent accesses sensitive messages without authorization.

From the tool's definition Tool name contains 'read' and description states 'Read a Gmail message by ID. Returns subject, from, to, date, and body.' — it retrieves email content with no modification or side effects.

The rule that runs gws_gmail_read safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gws_gmail_read, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gws_gmail_read": {}
  }
}

Questions about gws_gmail_read