gmail_modify_labels

What gmail_modify_labels does on Sage MCP

AI agents use gmail_modify_labels to create or update resources in Sage MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Sage MCP environment.

Why gmail_modify_labels is rated Medium

This tool modifies email labels (tags/folders) which changes how messages are organized and categorized in Gmail. While reversible (labels can be added back), this is a Write operation that alters message state. The severity is high because an adversary could manipulate labels to hide emails, reorganize inboxes, mark important messages as spam, or create confusion in email organization.

From the tool's definition Tool name 'gmail_modify_labels' and description 'Add or remove labels from a specific message' indicate modification of email metadata. The actions 'Add or remove labels' are reversible write operations on Gmail message attributes.

The rule that runs gmail_modify_labels safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_modify_labels, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_modify_labels": {
      "limits": [
        {
          "counter": "gmail_modify_labels_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about gmail_modify_labels