google_gmail_read

What google_gmail_read does on Odoo Claude MCP

AI agents call google_gmail_read to retrieve information from Odoo Claude MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why google_gmail_read is rated Low

This is a read-only operation that queries and retrieves email data. However, Gmail messages may contain sensitive personal information (PII, financial details, authentication credentials, confidential business communications), making accidental or malicious exposure a medium-severity risk. The tool does not modify, delete, or execute actions, so it remains in the Read category rather than a higher severity tier.

From the tool's definition Tool name explicitly states 'read' and description says 'Read a specific Gmail message by ID. Returns full body, headers, and labels.' – it retrieves message content without modification.

The rule that runs google_gmail_read safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Odoo Claude MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For google_gmail_read, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "google_gmail_read": {}
  }
}

Questions about google_gmail_read