search_messages

What search_messages does on Iconnect

AI agents call search_messages to retrieve information from Iconnect without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why search_messages is rated Low

This tool performs a read-only search operation on email messages. It queries existing data (searching by keyword in subject or sender fields) and returns results without creating, modifying, deleting, or executing any actions. The blast radius of misuse is minimal—an agent could retrieve email data it may not be authorized to see, but cannot alter, delete, or trigger external effects through this tool alone.

From the tool's definition Tool name 'search_messages' and description 'Search messages by keyword in subject or sender within a mailbox' indicate a query operation that retrieves data without modification or side effects.

The rule that runs search_messages safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Iconnect, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_messages, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_messages": {}
  }
}

Questions about search_messages