Gmail MCP Server

@klodr

Basic information

About Gmail MCP Server

Gmail MCP server with scope-gated tools (readonly / send / modify), path jails for attachments and downloads, hardened OAuth credentials, and Sigstore-signed releases. Read, search, send, draft, label, filter, and thread Gmail from any MCP-enabled AI assistant.

#gmail #email #oauth #security #mcp-server

Gmail MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "gmail": {
      "command": "npx",
      "args": [
        "-y",
        "@klodr/gmail-mcp"
      ]
    }
  }
}

Gmail MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Gmail Mcp?

Gmail Mcp reads, searches, sends, drafts, labels, filters, and threads Gmail from any MCP-enabled AI assistant. It wraps the Gmail API with scope-gated tools and in-process safeguards.

How to use Gmail Mcp?

Install globally via npm install -g @klodr/gmail-mcp or invoke directly with npx -y @klodr/gmail-mcp. Authenticate using the auth subcommand with a chosen OAuth scope. Add the server to your MCP client configuration as shown in the README. Requires Node.js 22+.

Key features of Gmail Mcp

Scope-gated tools filtered by granted OAuth scopes.
Path jails restrict attachment and download directories.
Hardened OAuth with file mode 0o600 and TOCTOU defense.
Per-bucket daily and monthly rate limits for sensitive actions.
Opt-in append-only JSONL audit log of tool calls.
Sigstore-signed releases with SLSA attestation and SBOM.

Use cases of Gmail Mcp

Read and search Gmail messages without send permissions.
Send emails using a read-only agent after re-authentication.
Manage labels and filters programmatically.
Draft messages and thread replies via AI assistants.
Log all Gmail tool usage for compliance or debugging.

Frequently asked questions

What OAuth scopes are supported?

`gmail.readonly`, `gmail.send`, and `gmail.modify` are supported; tool lists are filtered at startup based on the granted scope.

What are the runtime requirements?

Node.js 22 or higher is required.

Does Gmail Mcp impose rate limits?

Yes, per-bucket daily and monthly caps apply to send, delete, modify, drafts, labels, and filters.

How are attachments secured?

Path jails restrict where the agent can read and write, blocking exfiltration of sensitive files like `~/.ssh/id_rsa`.

Is an audit log available?

Yes, an opt-in append-only JSONL log records every tool call (redacted) for auditing purposes.

Comments

More Communication MCP servers

eSIMfly MCP

eSimfly-Official

MCP server for the eSIMfly Business API — let Claude, Cursor and other AI agents search eSIM plans, check usage, diagnose connectivity and (optionally) order

Faivelo Email

Benjamin Brookarsh

Business email on your own domain for AI agents. Read, search and send mail, manage mailboxes and aliases, and set up DNS automatically, with unlimited mailboxes on one flat plan.

Mobile Text Alerts SMS

Mobile Text Alerts

Official Mobile Text Alerts server. Send and schedule SMS, manage subscribers and groups, and complete carrier registration from any MCP-compatible AI assistant.

Atomic Mail Agentic

Atomic-Mail

Let your agents read, send and react to email autonomously, without human involvement

255

Pidgeon

Email inboxes for AI agents. Give an agent its own address in one call; it sends, receives and replies in threads, waits for a sign-up code and gets it back already extracted, and hands a conversation to a person when it