Google Gmail MCP server

Read from the package source without running it. The installed server may list more.

• create_cse_identitywrite action

  Creates and configures a client-side encryption identity for sending encrypted mail from a user account. The S/MIME certificate is published to a shared domain-wide directory, enabling secure communication within a Google Workspace organization.

• create_cse_keypairwrite action

  Creates and uploads a client-side encryption S/MIME public key certificate chain and private key metadata for Gmail. Requires either domain-wide delegation authority for administrators or hardware key encryption enabled for individual users.

• create_draftwrite action

  Creates a new email draft with the DRAFT label in Gmail. The draft can optionally include classification labels and custom label IDs.

• create_labelwrite action

  Creates a new custom label in Gmail for organizing messages and threads. Labels can be configured with specific visibility settings in the Gmail web interface.

• create_smime_configwrite action

  Upload and configure an S/MIME certificate for a send-as alias. The certificate must be provided in PKCS#12 format containing a private/public key pair and certificate chain.

• delete_cse_identitywrite action

  Permanently deletes a client-side encryption identity, preventing further use for sending encrypted messages. The identity cannot be restored; create a new identity with the same configuration if needed.

• delete_cse_keypair_permanentlywrite action

  Permanently and immediately deletes a client-side encryption key pair. The key pair must be disabled for at least 30 days before obliteration. Once obliterated, all messages encrypted with this key become permanently inaccessible to all users.

• delete_draftwrite action

  Permanently deletes a draft message without moving it to trash. This action is immediate and irreversible.

• delete_filterwrite action

  Permanently deletes a specified Gmail filter. This action is immediate and cannot be undone.

• delete_forwarding_addresswrite action

  Deletes a forwarding address and revokes any associated verification. This operation requires service account credentials with domain-wide delegation authority.

• delete_labelwrite action

  Permanently deletes a label and removes it from all messages and threads it is applied to. This action cannot be undone.

• delete_messagewrite action

  Permanently and immediately deletes a specified message. This action cannot be undone; consider using trash_message for recoverable deletion instead.

• delete_messages_batchwrite action

  Permanently deletes multiple messages by their IDs. Note that this operation provides no guarantees about message existence or prior deletion status.

• delete_send_as_smime_configwrite action

  Deletes the S/MIME configuration for a specified send-as alias. This removes the security certificate associated with the alias used for signing and encrypting outgoing emails.

• delete_threadwrite action

  Permanently deletes a thread and all messages within it. This action cannot be undone; consider using trash_thread as a safer alternative.

• disable_cse_keypair

  Disables a client-side encryption key pair, preventing the user from decrypting incoming CSE messages or signing outgoing CSE mail. The key pair can be re-enabled later using enable_cse_keypair, or permanently deleted after 30 days using obliterate_cse_keypair.

• enable_cse_keypair

  Reactivates a previously disabled client-side encryption key pair for use with associated encryption identities. Administrators require service account with domain-wide delegation authority; end users require hardware key encryption to be enabled.

• get_auto_forwarding

  Retrieves the auto-forwarding configuration for the specified Gmail account. This includes the forwarding address and whether auto-forwarding is enabled.

• get_cse_identity

  Retrieves a client-side encryption identity configuration for a specified email address. Administrators require service account with domain-wide delegation authority, while users require hardware key encryption to be enabled.

• get_cse_keypair

  Retrieves a client-side encryption key pair for Gmail. Administrators require service account authorization with domain-wide delegation, while users must have hardware key encryption enabled.

• get_delegate

  Retrieves the delegate relationship for a specified email address. This operation requires service account clients with domain-wide authority and uses the delegate's primary email address (not aliases).

• get_draft

  Retrieves a specific draft message by ID. Returns the draft in the requested format for viewing or further editing.

• get_filter

  Retrieves a specific Gmail filter by its ID. Use this to fetch the configuration and rules of an existing filter.

• get_forwarding_address

  Retrieves the configuration details for a specified forwarding address associated with a Gmail account. Use this to view forwarding settings for a particular email address.

• get_label

  Retrieves a specific Gmail label by its ID. Use this to fetch detailed information about a label, such as its name, visibility settings, and other metadata.

• get_message

  Retrieves a specific message by ID from the user's mailbox. Supports multiple output formats including full message content, headers only, or raw RFC 2822 format.

• get_message_attachment

  Retrieves a specific attachment from a Gmail message. Use this to download or access attachment metadata by providing the message ID and attachment ID.

• get_profile

  Retrieves the Gmail profile information for the authenticated user or a specified user, including account details and settings.

• get_send_as_aliaswrite action

  Retrieves a specific send-as alias configuration for a user. Returns an HTTP 404 error if the specified email address is not configured as a send-as alias.

• get_smime_info

  Retrieves the S/MIME configuration for a specified send-as alias. This allows you to access the details of a specific S/MIME certificate associated with an email alias.

• get_thread

  Retrieves a specific email thread by ID. Returns thread messages in the requested format with optional filtering of metadata headers.

• get_vacation_settings

  Retrieves the vacation responder settings for a Gmail account, including whether auto-reply is enabled and the message content.

• import_message

  Imports a message into the user's mailbox with standard email delivery scanning and classification. The message is processed similarly to SMTP delivery, with a maximum size limit of 150MB.

• insert_messagewrite action

  Inserts a message directly into the user's mailbox, bypassing scanning and classification, similar to IMAP APPEND. This operation does not send a message but adds it to the mailbox with optional metadata.

• list_cse_identities

  Retrieves all client-side encrypted identities for an authenticated user. Administrators with domain-wide delegation can manage identities for their organization, while users managing their own identities require hardware key encryption to be enabled.

• list_cse_keypairs

  Retrieves all client-side encryption key pairs for a user. Administrators with domain-wide delegation can manage keypairs for users in their organization, while individual users require hardware key encryption to be enabled.

• list_delegates

  Retrieves the list of delegates for the specified Gmail account. This operation requires service account credentials with domain-wide delegation authority.

• list_drafts

  Retrieves a list of draft messages from the user's mailbox. Supports filtering by search query and optional inclusion of drafts from spam and trash folders.

• list_filters

  Retrieves all message filters configured for a Gmail account. Filters define rules for automatically organizing, labeling, or processing incoming messages.

• list_forwarding_addresses

  Retrieves all forwarding addresses configured for the specified Gmail account. Forwarding addresses are alternative email addresses where incoming messages can be automatically sent.

• list_labels

  Retrieves all labels in the user's mailbox. Labels are used to organize and categorize emails in Gmail.

• list_mailbox_history

  Retrieves the chronological history of all changes to a mailbox, including message additions, deletions, and label modifications. Results are returned in chronological order by historyId and support pagination for efficient sync operations.

• list_messages

  Retrieves a list of messages from the user's mailbox, with optional filtering by labels and inclusion of spam/trash folders. Supports pagination through the maxResults parameter.

• list_send_as_aliaseswrite action

  Retrieves all send-as aliases configured for the specified Gmail account, including the primary email address and any custom 'from' aliases.

• list_smime_configs

  Lists all S/MIME configurations for a specified send-as alias. S/MIME configs define the certificates and encryption settings used when sending emails from this alias.

• list_threads

  Retrieves a list of message threads from the user's mailbox, with optional filtering by labels, search query, and inclusion of spam/trash folders.

• move_message_to_trash

  Moves a specified message to the trash folder. The message can be restored from trash before permanent deletion.

• move_thread_to_trash

  Moves a thread and all its associated messages to the trash. The thread and its messages can be permanently deleted or recovered from trash.

• remove_message_from_trashwrite action

  Restores a message from the trash by removing it from the trash folder. The message will be returned to its previous labels or inbox.

• remove_thread_from_trashwrite action

  Restores a thread from trash by removing it and all its associated messages from the trash folder.

• send_draftwrite action

  Sends an existing draft message to recipients specified in the To, Cc, and Bcc headers. The draft must already exist and contain valid recipient information.

• send_messagewrite action

  Sends an email message to recipients specified in the To, Cc, and Bcc headers. The message is delivered immediately to all specified recipients.

• send_verification_email_to_send_as_aliaswrite action

  Sends a verification email to a send-as alias address to confirm ownership. The alias must have a pending verification status and requires service account with domain-wide delegation authority.

• set_default_smime_config

  Sets the default S/MIME configuration for the specified send-as alias. This determines which S/MIME certificate will be used by default when sending emails from this alias.

• update_cse_identity_keypairwrite action

  Associates a new key pair with an existing client-side encryption identity. The updated key pair must validate against Google's S/MIME certificate profiles. Requires either domain-wide delegation authority for administrators or hardware key encryption enabled for individual users.

• update_draftwrite action

  Updates the content of an existing draft message. Replaces the draft's message body and metadata with the provided values.

• update_labelwrite action

  Updates an existing Gmail label with new properties such as display name and visibility settings. Only user-created labels can be modified; system labels cannot be changed.

• update_label_partialwrite action

  Update properties of a Gmail label using partial update semantics. Modify visibility settings, display name, or other label attributes without replacing the entire label configuration.

• update_message_labelswrite action

  Updates the labels applied to a specific message by adding and/or removing label IDs. You can modify up to 100 labels per request.

• update_message_labels_batchwrite action

  Modifies labels on specified messages by adding and/or removing label IDs. Supports batch operations on up to 1000 messages per request.

• update_send_as_aliaswrite action

  Updates a send-as alias configuration for a Gmail account, including display name, reply-to address, and optional HTML signature. Service accounts with domain-wide delegation can update non-primary addresses; standard users can only modify their own aliases.

• update_send_as_alias_partialwrite action
• update_thread_labelswrite action

  Modifies the labels applied to a thread, affecting all messages within it. Supports adding and removing labels in a single operation.

• Code scan5 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 138 days ago8/15
• Maintainer identityregistry namespace matches repository owner7/10

Safety score

80/100

higher than 65% of 916 Email servers

Tools

63

the typical Email server has 7

Tools that change things

51%

typical: 25%. Fewer write tools means less an agent can break

GitHub stars

31

more than 92% of 493 Email servers

Google Gmail: common questions

Is Google Gmail MCP server safe?

Mostly: it is graded B (80/100). Read the Google Gmail safety report

How do I install Google Gmail?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Google Gmail need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Google Gmail maintained?

The last commit was 176 days ago (2026-05-12). The latest release is v1.0.4.

What can I use instead of Google Gmail?

Servers from other publishers that do the same job: Inbox Zero MCP server, Imap MCP server and Fluxmail MCP server.

How does Google Gmail compare with other Email MCP servers?

safety score 80/100 (higher than 65% of 916 Email servers); tools 63 (the typical Email server has 7); tools that change things 51% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.