Read, write & add true inline (anchored) comments to Google Docs from Claude Code — an MCP server + CLI (Playwright).
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 5 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
gdoc_comment
-
gdoc_list_comments
-
gdoc_login
-
gdoc_read
-
gdoc_status
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 4308b19 · analyzer v33 · 3w ago
danger signals2
- over-broad OAuth scope https://www.googleapis.com/auth/documents
expected for this server's purpose
anaypaul-google-doc-claude-4308b19/gdocclaude/auth.py :23
"https://www.googleapis.com/auth/documents", - over-broad OAuth scope https://www.googleapis.com/auth/drive
expected for this server's purpose
anaypaul-google-doc-claude-4308b19/gdocclaude/auth.py :24
"https://www.googleapis.com/auth/drive",
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 10
filesystem 3
- fs anaypaul-google-doc-claude-4308b19/gdocclaude/auth.py :68
fd = os.open(token_file, os.O_WRONLY | os.O_CREAT | os.O_TRUNC, 0o600) - fs (weak) anaypaul-google-doc-claude-4308b19/scripts/e2e_tabs_comments.py :33
papers = json.load(open(DATA)) - fs (weak) anaypaul-google-doc-claude-4308b19/scripts/login.py :63
with open(SENTINEL, "w") as fh:
secrets 1
- secrets anaypaul-google-doc-claude-4308b19/gdocclaude/auth.py :32
TOKEN_FILE = os.environ.get("GDOC_TOKEN", os.path.join(_REPO_ROOT, "token.json"))
tool registrations 5
- gdoc_comment anaypaul-google-doc-claude-4308b19/gdocclaude/mcp_server.py :189
- gdoc_read anaypaul-google-doc-claude-4308b19/gdocclaude/mcp_server.py :214
- gdoc_list_comments anaypaul-google-doc-claude-4308b19/gdocclaude/mcp_server.py :220
- gdoc_login anaypaul-google-doc-claude-4308b19/gdocclaude/mcp_server.py :245
- gdoc_status anaypaul-google-doc-claude-4308b19/gdocclaude/mcp_server.py :254
declared dependencies 5
- mcp@[cli]>=1.2.0
- google-api-python-client@>=2.120.0
- google-auth@>=2.29.0
- google-auth-oauthlib@>=1.2.0
- playwright@>=1.44.0