drive_search

What drive_search does on UnClick

AI agents call drive_search to retrieve information from UnClick without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why drive_search is rated Low

This tool queries and retrieves file metadata from a user's Google Drive account. It does not create, modify, delete, or execute any content. However, severity is medium rather than low because unauthorized access to a user's Google Drive files could expose sensitive personal, financial, or business data if the agent misuses search parameters or exfiltrates file listings without proper authorization controls.

From the tool's definition Tool description states 'Search or list Google Drive files' — core Read operations that retrieve/query data without modification. The verb 'search' and 'list' are quintessential read-only operations.

Risk signalsHandles credentials or secrets (access_token)

The rule that runs drive_search safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UnClick, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For drive_search, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "drive_search": {}
  }
}

Questions about drive_search