Verified
community 1,168 GitHub stars
License: MIT
Last commit:
GongRzhe/Gmail-MCP-Server
Maintained by GongRzhe
- Access mode schema: act
- read+act (send, labels)
- Domain-Wide Delegation schema: no
- no
-
is_agenticstatus - REST-API / Exempt
- APIs covered (1)
- Gmail
Verified access capability from upstream documentation or source.
Per-user OAuth or non-DWD flow.
Evaluated against Google Workspace OAuth client rules.
Security Notes
Can send mail; inactive since . Indirect prompt injection risk from email bodies.
Credential Storage Posture
Local OAuth token file
is_agentic Policy Notes
Read guide
REST-API based.
Enforcement begins (flag locks ).
Verified
Declared OAuth 2.0 Scopes
Last verified| Declared Scope / Posture | Risk Classification | Auditor Rationale |
|---|---|---|
| Unverified (unknown) | Unverified | OAuth scopes were not explicitly enumerated in upstream documentation during the pass. |
Registry JSON Record
src/data/servers.json {
"name": "GongRzhe/Gmail-MCP-Server",
"slug": "gongrzhe-gmail-mcp-server",
"url": "https://github.com/GongRzhe/Gmail-MCP-Server",
"maintainer": "GongRzhe",
"type": "community",
"type_detail": "community",
"apis": [
"Gmail"
],
"scopes": [
"unknown"
],
"dwd": "no",
"dwd_detail": "no",
"access": "act",
"access_detail": "read+act (send, labels)",
"credential_storage": "Local OAuth token file",
"last_commit": "2025-08-06",
"license": "MIT",
"is_agentic_notes": "REST-API based.",
"security_notes": "Can send mail; inactive since 2025-08. Indirect prompt injection risk from email bodies.",
"featured": false,
"github_stars": 1168,
"verified_on": "2026-10-16"
}