← Back to search

gws-mcp-server

GitHub Actions Scanned 7d ago

MCP server that exposes Google Workspace CLI (gws) as Model Context Protocol tools

npm ↗
B
84.8 / 100

Versions

0.4.0latest
Jul 8, 2026
0.3.0
Jul 8, 2026
0.2.0
Jun 12, 2026
0.1.5
Jun 12, 2026
0.1.3
Mar 21, 2026
+ show 2 moreshow less
0.1.2
Mar 8, 2026
0.1.0
Mar 8, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

drive_files_download
annotations: verified low

Download a file's content from Google Drive. Returns the text content for text files, or a base64-encoded string for binary files. For Google Docs/Sheets/Slides, exports to a readable format (plain text by default).

fileId string savePath string exportMimeType string
readOnlyHint true openWorldHint true
gmail_drafts_create
annotations: verified low

Create a Gmail draft. Pass threadId to attach the draft to an existing conversation (it will appear as a reply within that thread). The draft is NOT sent — open Gmail to review and send.

cc string to string bcc string body string subject string htmlBody string threadId string inReplyTo string references string
readOnlyHint false openWorldHint true idempotentHint false destructiveHint false

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 18

info
Tool 'drive_files_download' annotations are consistent annotation_checker · 80%
info
Tool 'gmail_drafts_create' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Buffer.from base64 in conorbronsdon-gws-mcp-server-4e969c3/src/__tests__/mime.test.ts:40 entropy_analyzer · 75%
medium
Buffer.from base64 in conorbronsdon-gws-mcp-server-4e969c3/src/__tests__/mime.test.ts:57 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: drive_files_download manifest_parser · 85%
info
Tool: gmail_drafts_create manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 170 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%