gmail_create_label

What gmail_create_label does on Sage MCP

AI agents use gmail_create_label to create or update resources in Sage MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Sage MCP environment.

Why gmail_create_label is rated Medium

Creating a label is a reversible write operation that organizes existing emails but does not read sensitive data, execute external code, delete content, or move money. The blast radius of misuse is low—an attacker could create unwanted labels but could not access emails, delete messages, or cause significant harm. Reversibility via label deletion keeps this in Write rather than Execute.

From the tool's definition Tool name contains 'create' and description states 'Create a new label in the user' (presumed 'in the user's account'), indicating creation of a new organizational entity with no data destruction or irreversible side effects.

The rule that runs gmail_create_label safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_create_label, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_create_label": {
      "limits": [
        {
          "counter": "gmail_create_label_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about gmail_create_label