Google Mcp Agent — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Google Mcp Agent (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A unified FastMCP-powered agent that connects Gmail, Google Drive, and Google Classroom with LLM-ready tools for automation, parsing, and intelligent retrieval.
uv in an agentic RAG pipelineBefore running the project, set up your Google Cloud project for OAuth.
token.json file will be created automatically in your local directory.⚠️ _No need to publish the app — keeping it in testing mode is fine as long as the user is whitelisted._
Add this block to your msp.json or equivalent MCP config to run the main server:
{
"mcpServers": {
"main_mcp_server": {
"command": "uv",
"args": [
"--directory",
"absolute_path\\to\\current_project",
"run",
"server.py",
"--creds-file-path",
"absolute_path\\to\\client_creds.json",
"--token-path",
"absolute_path\\to\\app_tokens.json"
]
}
}🧰 Available Tools (Exposed via FastMCP) These tools are registered with FastMCP and can be used directly by your copilot system or any agent pipeline.
📬 Gmail Tools 🔹 get_unread_emails(limit: int = 5) Returns a list of unread emails from the user's inbox with metadata like subject, sender, and snippet. Automatically marks them as read.
🔹 read_email(email_id: str) Reads and decodes the full plain-text body of a specific email by its ID.
🔹 get_read_emails(limit: int = 50) Fetches recently read (non-unread) emails from the inbox.
🔹 get_spam_emails(limit: int = 20) Retrieves a list of emails from the Gmail spam folder with minimal metadata.
📂 Google Drive Tools
🔹 list_my_drive_files(limit: int = 10) Returns a list of recent files in the user's Google Drive, including ID, name, MIME type, and last modified time.
🔹 read_file_content(file_id: str) Reads and extracts text from a file in Drive. Supports:
Google Docs (exported as plain text)
Plain .txt files
PDFs (parsed using PyPDF2)
🏫 Google Classroom Tool 🔹 list_courses() Fetches the list of enrolled Google Classroom courses (read-only).
Each tool can be invoked via MCP runtime or LLM-powered interfaces. This setup enables rich, context-aware workflows that interact with the user's real data.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.