MCP server for Google Workspace security auditing — login audit, external sharing, daily brief
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio
verified
reported
listed in the official MCP registry counts 16 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
daily_brief
-
daily_brief_result
-
daily_brief_start
-
dmarc_rua_summary
-
drive_doc_activity
-
drive_external_sharing
-
get_user
-
gmail_message_trace
-
gmail_usage_report
-
group_delivery_policy
-
health_check
-
list_group_members
-
login_audit
-
shared_drive_membership_changes
-
suspended_accounts
-
user_oauth_tokens
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.16.0 · analyzer v33 · 1w ago
danger signals1
- over-broad OAuth scope https://mail.google.com/
expected for this server's purpose
gwsadm_mcp-0.16.0/tests/test_server.py :705
"scopes": ["https://mail.google.com/"],
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 10
filesystem 1
- fs (weak) gwsadm_mcp-0.16.0/tests/test_smoke_probes.py :12
from pathlib import Path
shell / exec 1
- shell (weak) gwsadm_mcp-0.16.0/tests/test_main.py :4
import subprocess
tool registrations 16
- health_check gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :310
- login_audit gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :392
- gmail_usage_report gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :542
- suspended_accounts gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :610
- get_user gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :706
- user_oauth_tokens gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :784
- gmail_message_trace gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :885
- dmarc_rua_summary gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1126
- group_delivery_policy gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1222
- list_group_members gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1270
- drive_external_sharing gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1616
- drive_doc_activity gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1723
show 4 more
- shared_drive_membership_changes gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1820
- daily_brief gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :1946
- daily_brief_start gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :2013
- daily_brief_result gwsadm_mcp-0.16.0/gwsadm_mcp/server.py :2048
declared dependencies 4
- mcp@>=1.2,<2
- google-api-python-client@>=2.100
- google-auth@>=2.23
- google-auth-httplib2@>=0.2