Back to Gmail MCP

Security Report

Gmail MCP

Pass
Version v1.0.0 Scanned 14 July 2026 at 11:25 Scanner v3.3.0

Summary

Detected

  • Services:
  • Permissions: network:console.cloud.google.com
  • Data Handling: pii

Undeclared

All items declared

Warnings

No warnings

Findings (4)

Permissions

info network:console.cloud.google.com declared
external-url
services/gmail-mcp.md:27

"https://console.cloud.google.com/"

Wrap reference URLs in backticks (`url`) or a blockquote (> line) to mark them as illustrative content

Credentials

info env:GMAIL_OAUTH_CREDENTIALS undeclared
credential-env-var
services/gmail-mcp.md:45

"{GMAIL_OAUTH_CREDENTIALS}"

This file references the environment variable GMAIL_OAUTH_CREDENTIALS. If this is a credential (API key, token, secret), declare it in requires.data_handling.

Data Handling

info pii declared
pii-explicit-mention
services/gmail-mcp.md:72

"PII"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

info pii declared
pii-explicit-mention
services/gmail-mcp.md:72

"pii"

This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.

Send feedback

Sign in to send feedback — it lets us follow up and keeps the tracker free of spam.