Gmail Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gmail Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for reading Gmail and creating drafts via AI assistants (Claude, OpenClaw, etc.).
Security model:
| Tool | Description |
|---|---|
list_filters | Show configured allowed search queries |
search_email | Search Gmail (query must match a whitelisted filter) |
get_email | Fetch full content of an email by ID |
create_draft | Create a draft — NOT sent, human reviews in Gmail |
credentials.json and place in the project foldergit clone https://github.com/mortenv/gmail-mcp
cd gmail-mcp
pip install -e .
# or with uv:
uv synccp config.example.yaml config.yamlEdit config.yaml:
First run opens a browser for OAuth2 login:
gmail-mcp config.yamlToken is cached in token.json — subsequent runs don't need the browser.
stdio mode (local):
{
"mcpServers": {
"gmail": {
"command": "gmail-mcp",
"args": ["/path/to/config.yaml"]
}
}
}HTTP/SSE mode (remote server):
export GMAIL_MCP_API_KEY=$(python -c "import secrets; print(secrets.token_hex(32))")
gmail-mcp --http config.yaml{
"mcpServers": {
"gmail": {
"url": "https://your-server:8001/sse",
"headers": { "X-API-Key": "your-key" }
}
}
}Uses standard Gmail search syntax:
filters:
- query: "label:inbox"
label: "Inbox"
- query: "from:[email protected]"
label: "From boss"
- query: "label:invoices newer_than:30d"
label: "Recent invoices"The AI can narrow results by appending terms to a base query: "label:inbox subject:urgent" — allowed if label:inbox is whitelisted.
credentials.json and token.json are gitignored — never commit themgmail.readonly + gmail.compose (no gmail.send)MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.