Gmail MCP Server

@klodr

Basic information

About Gmail MCP Server

Gmail MCP server with scope-gated tools (readonly / send / modify), path jails for attachments and downloads, hardened OAuth credentials, and Sigstore-signed releases. Read, search, send, draft, label, filter, and thread Gmail from any MCP-enabled AI assistant.

#gmail #email #oauth #security #mcp-server

Gmail MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "gmail": {
      "command": "npx",
      "args": [
        "-y",
        "@klodr/gmail-mcp"
      ]
    }
  }
}

Gmail MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Gmail Mcp?

Gmail Mcp reads, searches, sends, drafts, labels, filters, and threads Gmail from any MCP-enabled AI assistant. It wraps the Gmail API with scope-gated tools and in-process safeguards.

How to use Gmail Mcp?

Install globally via npm install -g @klodr/gmail-mcp or invoke directly with npx -y @klodr/gmail-mcp. Authenticate using the auth subcommand with a chosen OAuth scope. Add the server to your MCP client configuration as shown in the README. Requires Node.js 22+.

Key features of Gmail Mcp

Scope-gated tools filtered by granted OAuth scopes.
Path jails restrict attachment and download directories.
Hardened OAuth with file mode 0o600 and TOCTOU defense.
Per-bucket daily and monthly rate limits for sensitive actions.
Opt-in append-only JSONL audit log of tool calls.
Sigstore-signed releases with SLSA attestation and SBOM.

Use cases of Gmail Mcp

Read and search Gmail messages without send permissions.
Send emails using a read-only agent after re-authentication.
Manage labels and filters programmatically.
Draft messages and thread replies via AI assistants.
Log all Gmail tool usage for compliance or debugging.

Frequently asked questions

What OAuth scopes are supported?

`gmail.readonly`, `gmail.send`, and `gmail.modify` are supported; tool lists are filtered at startup based on the granted scope.

What are the runtime requirements?

Node.js 22 or higher is required.

Does Gmail Mcp impose rate limits?

Yes, per-bucket daily and monthly caps apply to send, delete, modify, drafts, labels, and filters.

How are attachments secured?

Path jails restrict where the agent can read and write, blocking exfiltration of sensitive files like `~/.ssh/id_rsa`.

Is an audit log available?

Yes, an opt-in append-only JSONL log records every tool call (redacted) for auditing purposes.

Comments

More Communication MCP servers

uplika

Hosted MCP server that lets your AI agent post to Threads, Instagram, YouTube, Facebook, TikTok, Pinterest, Bluesky, Telegram, Discord, Ghost and Naver Blog. Setup for each agent.

Ghostedit

Post to Instagram, TikTok, YouTube, Threads, LinkedIn, Bluesky and Mastodon from Claude, ChatGPT or Claude Code. Every post is checked against each platform's rules before it goes out, you can see what worked, and Instag

HelpWell

Workado, LLC

HelpWell connects AI assistants to your help desk, knowledge base, live chat support and email marketing automation for SaaS. Triage support tickets, draft help docs and replies, manage contacts, and prepare newsletters

RelayLink

RelayLink lets your AI assistant send briefings to other people's AI assistants. Draft a package from your current conversation, attach files, approve the note, and the recipient's AI gets the full context: decisions, op

SocialFaktory

Run a brand's social media from your agent: write posts in the brand's voice, generate short videos, schedule and publish to TikTok, Instagram, YouTube, X, LinkedIn, Facebook and Pinterest, and read the metrics back. 21