Is Gmail MCP server safe?

Probably. Read the findings first.

C66/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

2 medium

Code scan192 source files scanned; 192 source files scanned15/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 5 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

mediumeval / new Function usedexec.eval

bin/server.js: …curity/noGlobalEval: dual esm and cjs eval( "import('../dist/esm/setup/version-…

mediumeval / new Function usedexec.eval

bin/server.js: …curity/noGlobalEval: dual esm and cjs eval( "import('../dist/esm/setup/version-…

Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Workspace
Google Workspace MCP server for Gmail, Drive, Calendar, Docs, Sheets, Slides, Forms, Tasks, Chat.
not reviewed
Widely used
A
Better Workspace
Google Workspace MCP — Docs, Drive, Calendar, Gmail, Sheets, Slides, Tasks, Chat, People, Forms
not reviewed
Growing
C
FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs
Multiple Gmail accounts, editable Google Sheets & Docs for AI agents. Deny-by-default access rules.
not reviewed
Growing
A