gmail_get_message

What gmail_get_message does on Sage MCP

AI agents call gmail_get_message to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gmail_get_message is rated Low

This tool retrieves email messages by ID and returns their content. It performs a query operation (get) with no side effects on the data—the message is not modified, deleted, or used to trigger external actions. The severity is medium rather than low because email messages may contain sensitive personal, financial, or confidential information; misuse could lead to unauthorized information disclosure.

From the tool's definition Tool name 'gmail_get_message' and description 'Get a specific message by ID with full content including headers and body' indicates retrieval of existing email data with no modification or deletion.

The rule that runs gmail_get_message safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_get_message, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_get_message": {}
  }
}

Questions about gmail_get_message