Model Context Protocol moderate risk

Gsuite

The mcp-gsuite server enables interaction with Google services like Gmail and Calendar, allowing read and write operations via OAuth 2.0 authentication.

Connections & Capabilities

Connects To

GitHubGCP

Capabilities

readwrite

Quickstart

Install

npx -y @smithery/cli install mcp-gsuite --client claude

Config

{
  "mcpServers": {
    "mcp-gsuite": {
      "command": "uv",
      "args": [
        "--directory",
        "<dir_to>/mcp-gsuite",
        "run",
        "mcp-gsuite"
      ]
    }
  }
}

Exposed MCP Tools (9)

safe

gmail_get_user_info

Retrieves the Gmail user's information.

Read-only operation, no side effects.

safe

gmail_query_emails

Queries emails based on specified criteria (e.g., unread, sender, date range).

Read-only operation, no side effects.

safe

gmail_retrieve_email

Retrieves the content of a specific email by its ID.

Read-only operation, no side effects.

moderate

gmail_create_draft

Creates a new draft email with specified recipients, subject, and body.

Creates a draft email, but does not send it immediately.

high

gmail_delete_draft

Deletes a draft email.

Deletes an email, which could lead to data loss.

moderate

gmail_reply_to_email

Replies to an existing email, either sending immediately or saving as a draft.

Can send emails or create drafts.

safe

calendar_get_events

Retrieves calendar events within a specified time range.

Read-only operation, no side effects.

moderate

calendar_create_event

Creates a new calendar event with specified details.

Creates a calendar event.

high

calendar_delete_event

Deletes a calendar event.

Deletes a calendar event, which could disrupt scheduling.

Safety Assessment

This server provides both read and write access to Google services, increasing the risk profile. It is safe when properly configured with strong OAuth credentials and appropriate account permissions, but risky if credentials are leaked or overly permissive access is granted.

OAuth 2.0 authentication required
Account-specific credentials storage
Clearly defined scopes for Gmail and Calendar access
Ability to configure account access and permissions

Potential for unauthorized access if OAuth credentials are compromised
Write access to email and calendar data
Deletion of emails and calendar events possible
Reliance on user-configured security settings in Google accounts
Exposure of sensitive data (emails, calendar events) if misconfigured