Gmail MCP server with auto authentication support
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v1.1.11 · analyzer v28 · 3d ago
danger signals1
- over-broad OAuth scope gmail.modify package/dist/index.js :102
'https://www.googleapis.com/auth/gmail.modify',
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 5
filesystem 2
- fs package/dist/index.js :9
import fs from 'fs'; - fs package/dist/utl.js :1
import fs from 'fs';
network 1
- net package/dist/index.js :12
import http from 'http';
install hooks 2
- prepare package/package.json :14
npm run build - prepublishOnly package/package.json :15
npm run build
declared dependencies 13
- @modelcontextprotocol/sdk@^0.4.0
- @types/mime-types@^2.1.4
- google-auth-library@^9.4.1
- googleapis@^129.0.0
- mcp-evals@^1.0.18
- mime-types@^3.0.1
- nodemailer@^7.0.3
- open@^10.0.0
- zod@^3.22.4
- zod-to-json-schema@^3.22.1
- @types/node@^20.10.5
- @types/nodemailer@^6.4.17
- typescript@^5.3.3