Gong Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gong Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP that exposes Gong call data to Claude Desktop. Part of the PM Signal Intelligence system.
Exposes five tools to Claude:
speakerId against participants from get_call_details.maxCalls (default 50, max 200) bounds how many calls are scanned.npm installnpm run buildGONG_ACCESS_KEY=your-access-key GONG_SECRET_KEY=your-secret-key npm startThe server communicates over stdio (stdin/stdout), so you won't see output in the terminal. It's designed to be spawned by Claude Desktop.
Open Claude Desktop > Settings > Developer > App Config File.
Add the following to the mcpServers section (create the section if it doesn't exist):
{
"mcpServers": {
"gong": {
"command": "node",
"args": ["/absolute/path/to/gong-mcp-server/build/index.js"],
"env": {
"GONG_ACCESS_KEY": "your-access-key",
"GONG_SECRET_KEY": "your-secret-key"
}
}
}
}Replace /absolute/path/to/gong-mcp-server with the actual path on your machine.
After saving the config, restart Claude Desktop. The Gong connector should appear in Settings > Connectors.
In Settings > Connectors > gong, set tool permissions:
Once connected, Claude can use the Gong tools directly:
"List all Gong calls from last week"
→ Claude calls list_calls with the date range
"Show me the transcript for call 1234567890"
→ Claude calls get_transcripts with the call ID
"Search for mentions of 'city manager' in Gong calls this month"
→ Claude calls search_calls with the query and date range
"Who was on the call with City of Durham on March 15?"
→ Claude calls get_call_details with the call IDGong's API has rate limits. The server retries 429 responses up to 3 times with exponential backoff, honoring Retry-After when present. If you still see rate-limit errors during large backfills, reduce maxCalls on search_calls or narrow the date range.
The server uses these Gong v2 endpoints:
GET /v2/calls — list calls by date range (cursor-paginated)POST /v2/calls/extensive — get detailed call data with participantsPOST /v2/calls/transcript — get call transcriptsGET /v2/users — list users (cursor-paginated)Full API documentation: https://gong.app.gong.io/settings/api/documentation
Server not appearing in Claude Desktop connectors:
node is accessible from the system PATH.Authentication errors:
Empty results:
Rate limit errors:
search_calls tool has a maxCalls parameter (default 50).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.