Evaluation record · mcp-server-gmail

MCP Gmail Server

v1.0.0

Community

MCPemailgooglemcpmodel-context-protocol

Strong

About This MCP

Community-maintained MCP server for Gmail email operations. Enables AI models to read, send, search, label, and manage emails through the Gmail API. Includes support for attachments, threading, and advanced search. NOTE: Google now offers an official hosted Gmail MCP server (gmailmcp.googleapis.com) via the Workspace Developer Preview Program, announced May 2026; it supersedes community Gmail MCP servers for most new deployments and is the recommended option where available.

Last Evaluated: July 9, 2026

Official Website

Trust Vector Analysis

Dimension Breakdown

🚀Performance & Reliability

email search accuracy

Search accuracy testing

Evidence

Gmail API — Powerful search with Gmail's query language

highVerified: 2026-07-09

send reliability

Send success rate testing

Evidence

Gmail Send API — High reliability for email sending with delivery confirmation

highVerified: 2026-07-09

rate limit handling

Rate limiting behavior testing

Evidence

Gmail API Quotas — Subject to Gmail API rate limits (250 quota units/user/second)

mediumVerified: 2026-07-09

attachment handling

Attachment processing testing

Evidence

Gmail Attachments — Reliable attachment upload and download with size limits (25MB)

mediumVerified: 2026-07-09

error recovery

Error handling testing

Evidence

Implementation Review — Handles Gmail API errors with retry logic

mediumVerified: 2026-07-09

🛡️Security

authentication security

Authentication mechanism review

Evidence

Google OAuth 2.0 — Uses OAuth 2.0 with scoped access tokens

highVerified: 2026-07-09

token exposure risk

Token security analysis

Evidence

MCP Security Model — OAuth tokens stored locally; AI can perform email operations

highVerified: 2026-07-09

email send risk

Operation authorization testing

Evidence

Security Analysis — AI can send emails on user's behalf, potential for misuse

highVerified: 2026-07-09

email deletion risk

Destructive operation testing

Evidence

Gmail API — Can delete or trash emails if permissions granted

highVerified: 2026-07-09

scope limitation

Permission scope testing

Evidence

Gmail API Scopes — Granular OAuth scopes available but requires careful configuration

mediumVerified: 2026-07-09

audit logging

Audit logging review

Evidence

Google Workspace Audit — Operations logged in Google Workspace audit logs (for Workspace accounts)

mediumVerified: 2026-07-09

🔒Privacy & Compliance

email content exposure

Data flow analysis

Evidence

MCP Data Flow — Email content including body and headers sent to LLM provider

highVerified: 2026-07-09

contact information exposure

PII exposure assessment

Evidence

Privacy Analysis — Email addresses, names, and contact information exposed

highVerified: 2026-07-09

attachment privacy

Attachment privacy assessment

Evidence

Security Analysis — Email attachments can be downloaded and sent to LLM provider

highVerified: 2026-07-09

third party data sharing

Data sharing analysis

Evidence

LLM Provider Policies — Email content shared with LLM provider per their privacy policy

highVerified: 2026-07-09

conversation history privacy

History privacy assessment

Evidence

Privacy Analysis — Email threads and conversation history accessible

mediumVerified: 2026-07-09

👁️Trust & Transparency

documentation quality

Documentation completeness review

Evidence

Gmail MCP Docs — Good documentation but community-maintained

mediumVerified: 2026-07-09

operation visibility

Logging and traceability assessment

Evidence

MCP Protocol — All operations logged in MCP transaction logs

highVerified: 2026-07-09

open source transparency

Source code review

Evidence

GitHub Repository — Open source community implementation

highVerified: 2026-07-09

privacy risk disclosure

Privacy disclosure review

Evidence

Security Documentation — Limited privacy risk warnings in documentation

mediumVerified: 2026-07-09

⚙️Operational Excellence

ease of setup

Setup complexity assessment

Evidence

Setup Documentation — Requires Google Cloud project setup and OAuth consent configuration

mediumVerified: 2026-07-09

api performance

Performance benchmarking

Evidence

Gmail API Performance — Good performance for most operations (typically 100-500ms)

mediumVerified: 2026-07-09

reliability

Reliability analysis

Evidence

Gmail API Stability — Built on reliable Gmail API with high uptime

highVerified: 2026-07-09

operation coverage

Feature coverage assessment

Evidence

Gmail MCP Server — Covers read, send, search, label, and attachment operations

highVerified: 2026-07-09

community support

Community support assessment

Evidence

GitHub Community — Community-maintained with moderate activity

Google Workspace MCP servers documentation — Google launched an official Gmail MCP server (https://gmailmcp.googleapis.com/mcp/v1) with OAuth 2.0 in the Workspace Developer Preview Program (announced May 2026); community Gmail MCP servers are superseded for most uses

mediumVerified: 2026-07-09

Strengths

+Comprehensive Gmail operations (read, send, search, label, attachments)
+Built on reliable Gmail API with high uptime
+Powerful email search with Gmail query language
+OAuth 2.0 authentication with granular scope controls
+Open source community implementation
+Good for email automation and customer support workflows

Limitations

!Email content including body and attachments exposed to LLM provider
!AI can send emails on user's behalf, risk of impersonation
!Email addresses and contact information exposed
!Can delete or trash emails if permissions granted
!Subject to Gmail API rate limits (250 quota units/user/second)
!Complex OAuth setup requiring Google Cloud project configuration
!Community implementations vary in quality and maintenance; Google's official Gmail MCP server (Workspace Developer Preview, May 2026) is the recommended option going forward

Metadata

license: MIT

supported platforms

0: All platforms with Node.js/Python

programming languages

0: TypeScript

1: Python

mcp version: 1.0

github repo: https://github.com/modelcontextprotocol/servers

api dependency: Gmail API, Google APIs Client Library

authentication: OAuth 2.0 with Google

first release: 2024-11

maintained by: Community

official alternative: Google official Gmail MCP server (https://gmailmcp.googleapis.com/mcp/v1, Workspace Developer Preview Program, announced May 2026)

Use Case Ratings

code generation

Moderate applicability for email automation code generation

customer support

Excellent for email support automation and ticket processing

content creation

Useful for email newsletter creation and distribution

data analysis

Good for analyzing email patterns and communication metrics

research assistant

Useful for email research and contact organization

legal compliance

High risk of exposing privileged communications; not recommended

healthcare

High risk of HIPAA violations with patient communications

financial analysis

Risk of exposing financial communications and sensitive data

education

Good for educational email management and communication automation

creative writing

Moderate applicability for writer correspondence management