gmail_search_messages

What gmail_search_messages does on Sage MCP

AI agents call gmail_search_messages to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gmail_search_messages is rated Low

This tool retrieves/queries email messages without creating, modifying, or deleting data. It has no side effects beyond data retrieval. However, severity is elevated to 'high' because email messages often contain sensitive personal information (passwords, tokens, private communications, financial details, PII), and an AI agent with uncontrolled search access could exfiltrate large volumes of such data.

From the tool's definition Tool name 'gmail_search_messages' and description 'Search messages using Gmail search syntax' indicate retrieval of message data with no modification or deletion. The word 'Search' is a typical Read operation.

The rule that runs gmail_search_messages safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gmail_search_messages, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gmail_search_messages": {}
  }
}

Questions about gmail_search_messages