Mcp Gmail V2 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Gmail V2 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides Gmail integration capabilities for AI models and tools. This server enables AI assistants to connect to Gmail accounts, check connection status, and send emails through a secure interface.
The server implements the following Gmail-related tools:
connect-gmailInitiates a connection to a Gmail account. This tool will provide a redirect URL for OAuth authentication.
check-gmail-connectionChecks the current Gmail connection status and displays user profile information including email address, total messages, and total threads.
send-emailSends an email through the connected Gmail account. Parameters:
to: The email address of the recipientsubject: The subject of the emailbody: The body content of the emailYou can configure the Gmail AI agent server in your MCP client. Here is an example configuration for Claude Desktop (Settings -> Developer -> Edit Config):
{
"mcpServers": {
"gmail-agent": {
"command": "node",
"args": ["path/to/your/gmail-mcp/dist/index.js"],
"env": {
"COMPOSIO_API_KEY": "<YOUR_COMPOSIO_API_KEY>"
}
}
}
}If you're running from source:
# Clone the repository
git clone <repository-url>
cd gmail-mcp
# Install dependencies
npm install
# Build the project
npm run build
# Run the server
npm startThen configure your MCP client to point to the built server:
{
"mcpServers": {
"gmail-agent": {
"command": "node",
"args": ["/path/to/gmail-mcp/dist/index.js"],
"env": {
"COMPOSIO_API_KEY": "<YOUR_COMPOSIO_API_KEY>"
}
}
}
}connect-gmail tool - this will provide an OAuth linkcheck-gmail-connection to verify everything is workingsend-email tool with recipient, subject, and body parametersconnect-gmail to start the OAuth flowcheck-gmail-connection to confirm successful connectionsend-email to compose and send emails through your connected Gmail accountconnect-gmail again to re-authenticate~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.