Change MailGen settings from chat

Open Complexity, select your owned mailbox, and enable the desired settings tool. BFF and AdminService check current permission, MailGen license, run selection, and separate group grant.

The signed actor supplies account context. Model input cannot contain user, tenant, or account IDs. AdminService writes only that actor's msintegrationv2.mailgen_user_settings record.

Tool	Permission	Scope
readMailGenSettings	settings.mailGen.read	Read five UI preferences.
setMailGenPreference	settings.mailGen.update	Change one allowed preference.
listTrustedSenders	settings.trustedSenders.read	Read addresses trusted for external images.
addTrustedSender	settings.trustedSenders.add	Add one email address.
removeTrustedSender	settings.trustedSenders.remove	Remove one email address.
readFolderAppearance	settings.folderAppearance.read	Read one existing folder's appearance.
setFolderAppearance	settings.folderAppearance.update	Replace or reset that appearance.

The preference allowlist is emailListDensity, emailViewerPosition, folderSortMode, markReadAfter, and blockExternalImages. Language, theme, profile, and login belong to Account. These tools cannot read or change them. Full /api/user-settings PATCH and reset are not agent actions.

AdminService rejects policy-locked fields and protected actor overrides. Trusted-sender actions normalize email addresses and update the list atomically without changing other settings. Locked or protected lists cannot be changed.

Folder appearance requires an active verified Microsoft mailbox and its users_folders record. The key is accountId:folderId. A write changes one JSONB key. null resets that key. Other accounts/folders remain inaccessible. See Microsoft setup.

Check the returned value or reopen the corresponding settings panel. A denied policy requires administrator review, not another tool name.