Gmail MCP Server

@klodr

Basic information

About Gmail MCP Server

Gmail MCP server with scope-gated tools (readonly / send / modify), path jails for attachments and downloads, hardened OAuth credentials, and Sigstore-signed releases. Read, search, send, draft, label, filter, and thread Gmail from any MCP-enabled AI assistant.

#gmail #email #oauth #security #mcp-server

Gmail MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "gmail": {
      "command": "npx",
      "args": [
        "-y",
        "@klodr/gmail-mcp"
      ]
    }
  }
}

Gmail MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Gmail Mcp?

Gmail Mcp reads, searches, sends, drafts, labels, filters, and threads Gmail from any MCP-enabled AI assistant. It wraps the Gmail API with scope-gated tools and in-process safeguards.

How to use Gmail Mcp?

Install globally via npm install -g @klodr/gmail-mcp or invoke directly with npx -y @klodr/gmail-mcp. Authenticate using the auth subcommand with a chosen OAuth scope. Add the server to your MCP client configuration as shown in the README. Requires Node.js 22+.

Key features of Gmail Mcp

Scope-gated tools filtered by granted OAuth scopes.
Path jails restrict attachment and download directories.
Hardened OAuth with file mode 0o600 and TOCTOU defense.
Per-bucket daily and monthly rate limits for sensitive actions.
Opt-in append-only JSONL audit log of tool calls.
Sigstore-signed releases with SLSA attestation and SBOM.

Use cases of Gmail Mcp

Read and search Gmail messages without send permissions.
Send emails using a read-only agent after re-authentication.
Manage labels and filters programmatically.
Draft messages and thread replies via AI assistants.
Log all Gmail tool usage for compliance or debugging.

Frequently asked questions

What OAuth scopes are supported?

`gmail.readonly`, `gmail.send`, and `gmail.modify` are supported; tool lists are filtered at startup based on the granted scope.

What are the runtime requirements?

Node.js 22 or higher is required.

Does Gmail Mcp impose rate limits?

Yes, per-bucket daily and monthly caps apply to send, delete, modify, drafts, labels, and filters.

How are attachments secured?

Path jails restrict where the agent can read and write, blocking exfiltration of sensitive files like `~/.ssh/id_rsa`.

Is an audit log available?

Yes, an opt-in append-only JSONL log records every tool call (redacted) for auditing purposes.

Comments

More Communication MCP servers

SocialFaktory

Run a brand's social media from your agent: write posts in the brand's voice, generate short videos, schedule and publish to TikTok, Instagram, YouTube, X, LinkedIn, Facebook and Pinterest, and read the metrics back. 21

RelayLink

RelayLink lets your AI assistant send briefings to other people's AI assistants. Draft a package from your current conversation, attach files, approve the note, and the recipient's AI gets the full context: decisions, op

Canarics

AI call analysis and voice agents for sales teams. This MCP server lets a team's own AI assistant read minute usage, agents, call summaries and daily stats, look up caller history, schedule consent-gated AI callbacks, an

Paddock Cards

Paddock

Send birthday cards, Christmas cards and postcards, printed and mailed for you.

Mektup-mcp

WeeCi

Mektup gives AI agents and their humans a real email mailbox, not just a one-way sending API. Through 41 MCP tools, an agent can register a domain, create a mailbox, send and receive mail, and manage threads, drafts, fol