outlook_get_attachment

What outlook_get_attachment does on Sage MCP

AI agents call outlook_get_attachment to retrieve information from Sage MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why outlook_get_attachment is rated Low

This tool retrieves and queries attachment data from email messages without side effects or state changes. It falls clearly under the Read category. Severity is medium rather than low because email attachments may contain sensitive information (PII, credentials, business secrets), so unauthorized retrieval could expose confidential data, but the tool itself does not execute code, modify data, or cause financial harm.

From the tool's definition Tool name is 'outlook_get_attachment' and description states it 'Get metadata and content for a specific attachment on an email message' — purely a retrieval operation with no modification, deletion, or execution.

The rule that runs outlook_get_attachment safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For outlook_get_attachment, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "outlook_get_attachment": {}
  }
}

Questions about outlook_get_attachment