Lite Google Workspace Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Lite Google Workspace Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Lightweight MCP server for Gmail and Google Calendar. Each Google account runs as an independent process on its own port.
Claude Code --HTTP--> lite-google-workspace-mcp (port 8001) --Google API--> [email protected]
--HTTP--> lite-google-workspace-mcp (port 8002) --Google API--> [email protected]~/.config/lite-google-workspace-mcp/tokens/<account>.jsongoogle-authhttp://localhost:8000/oauth2callback~/.config/lite-google-workspace-mcp/client_secret.jsongit clone https://github.com/WhymustIhaveaname/lite-google-workspace-mcp.git
cd lite-google-workspace-mcp
uv syncCreate ~/.config/lite-google-workspace-mcp/config.toml:
[accounts.myaccount]
port = 8001
[accounts.work]
port = 8002
allowed_recipients = ["[email protected]", "[email protected]"]The account name is just a label you choose. It maps to a token file and a port.
allowed_recipients is optional. When set, send_gmail_message and draft_gmail_message will only allow sending to the listed addresses (checked against to/cc/bcc, case-insensitive). Omit it to allow sending to anyone.
uv run lite-google-workspace-mcp auth myaccountThis prints an OAuth URL and opens your browser. Sign in with the Google account you want to link, grant permissions (you can skip some scopes if you want), and the token is saved locally.
Repeat for each account.
Manual:
uv run lite-google-workspace-mcp serve --account myaccountWith systemd (recommended):
cp contrib/[email protected] ~/.config/systemd/user/
systemctl --user daemon-reload
systemctl --user enable --now lite-google-workspace-mcp@myaccountclaude mcp add --scope user --transport http lite-gmail-myaccount http://localhost:8001/mcpIf a token expires or you want to change granted scopes:
# Stop the service first (auth uses port 8000 which must be free)
systemctl --user stop lite-google-workspace-mcp@myaccount
# Re-authorize
uv run lite-google-workspace-mcp auth myaccount
# Restart
systemctl --user start lite-google-workspace-mcp@myaccount| Tool | Description |
|---|---|
| search_gmail_messages | Search by Gmail query syntax |
| get_gmail_message_content | Read a single message |
| get_gmail_messages_content_batch | Read multiple messages |
| get_gmail_thread_content | Read an entire thread |
| get_gmail_threads_content_batch | Read multiple threads |
| get_gmail_attachment_content | Download attachment |
| send_gmail_message | Send (plain text or HTML, with attachments) |
| draft_gmail_message | Create a draft |
| list_gmail_labels | List all labels |
| manage_gmail_label | Create/update/delete labels |
| list_gmail_filters | List all filters |
| manage_gmail_filter | Create/delete filters |
| modify_gmail_message_labels | Add/remove labels on a message |
| batch_modify_gmail_message_labels | Bulk label modification |
| Tool | Description |
|---|---|
| list_calendars | List all calendars |
| get_events | Query events by time range |
| manage_event | Create/update/delete events |
| manage_out_of_office | Create/update/delete OOO blocks |
| manage_focus_time | Create/update/delete focus time |
| query_freebusy | Check availability |
| create_calendar | Create a new calendar |
uv sync --extra dev
uv run pytest
uv run ruff check src/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.