gmail
10 Dtwo policies tagged "gmail", including Block Gmail Filter Creation (Auto-Forward Persistence), Deny Agent Email Sends to External Recipients. Browse by what the control does rather than which app it targets.
Block Gmail Filter Creation (Auto-Forward Persistence)Blocks the classic BEC/exfiltration persistence primitive: Gmail filters that can auto-forward or auto-delete mail and outlive the agent session.Deny Agent Email Sends to External RecipientsDenies Gmail send-class tool calls when any recipient in to, cc, or bcc falls outside a documented corporate-domain allowlist.Filter Dormant Conversations Out of Gmail Readsgoverned responses)Freeze Destructive Gmail OperationsDenies the irreversible destruction surface that community Gmail MCP servers expose — permanent email deletion, label deletion, and filter deletion — for…Gmail Cap Bulk ExportThrottles mass-harvesting of a mailbox by capping the per-call blast radius of the two Gmail MCP surfaces that return many full email bodies at once:Gmail: Role-Gated Writes (Read-Only Default)Makes Gmail read-only by default on the MCP path. Verified read tools pass for everyone.Hide Threads Carrying a Restricted Gmail Labelgoverned responses)Mask Card Numbers in Email Content Read by AgentsMasks payment-card-number (PAN) shapes in email content returned to agents by Gmail mailbox-read tools.Restrict Gmail Thread Searches to Recent MailRewrites every Gmail thread search on the way in to prepend a newer than: recency term, so Gmail itself returns only recent correspondence.Strip Blocked Senders from Gmail Readsgoverned responses)