← Back to search

@presto-ai/google-workspace-mcp

GitHub Actions Scanned 27d ago

Google Workspace MCP Server - npm distribution

C
64.2 / 100

Versions

1.0.12latest
Dec 22, 2025
1.0.6
Dec 20, 2025
1.0.5
Dec 20, 2025
1.0.4
Dec 20, 2025
1.0.3
Dec 20, 2025
+ show 3 moreshow less
1.0.2
Dec 20, 2025
1.0.1
Dec 20, 2025
1.0.0
Dec 20, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 56

auth.clear
annotations: none low

Clears the authentication credentials, forcing a re-login on the next request.

auth.refreshToken
annotations: none low

Manually triggers the token refresh process.

docs.create
annotations: none low

Creates a new Google Doc. Can be blank or with Markdown content.

title string
docs.insertText
annotations: none low

Inserts text at the beginning of a Google Doc.

documentId string
docs.find
annotations: none low

Finds Google Docs by searching for a query in their title. Supports pagination.

drive.findFolder
annotations: none low

Finds a folder by name in Google Drive.

folderName string
drive.createFolder
annotations: none low

Creates a new folder in Google Drive.

name string
docs.move
annotations: none low

Moves a document to a specified folder.

documentId string folderName string
docs.getText
annotations: none low

Retrieves the text content of a Google Doc.

documentId string
docs.appendText
annotations: none low

Appends text to the end of a Google Doc.

text string documentId string
docs.replaceText
annotations: none low

Replaces all occurrences of a given text with new text in a Google Doc.

findText string documentId string
docs.extractIdFromUrl
annotations: none low

Extracts the document ID from a Google Workspace URL.

url string
slides.getText
annotations: none low

Retrieves the text content of a Google Slides presentation.

slides.find
annotations: none low

Finds Google Slides presentations by searching for a query. Supports pagination.

query string
slides.getMetadata
annotations: none low

Gets metadata about a Google Slides presentation.

slides.getImages
annotations: none low

Downloads all images embedded in a Google Slides presentation to a local directory.

slides.getSlideThumbnail
annotations: none low

Downloads a thumbnail image for a specific slide in a Google Slides presentation to a local path.

sheets.getText
annotations: none low

Retrieves the content of a Google Sheets spreadsheet.

sheets.getRange
annotations: none low

Gets values from a specific range in a Google Sheets spreadsheet.

spreadsheetId string
sheets.find
annotations: none low

Finds Google Sheets spreadsheets by searching for a query. Supports pagination.

query string
sheets.getMetadata
annotations: none low

Gets metadata about a Google Sheets spreadsheet.

spreadsheetId string
drive.search
annotations: none low

Searches for files and folders in Google Drive. The query can be a simple search term, a Google Drive URL, or a full query string. For more information on query strings see: https://developers.google.com/drive/api/guides/search-files

drive.downloadFile
annotations: none low

Downloads the content of a file from Google Drive to a local path. Note: Google Docs, Sheets, and Slides require specialized handling.

fileId string
calendar.list
annotations: none low

Lists all of the user's calendars.

calendar.createEvent
annotations: none low

Creates a new event in a calendar.

end object start object summary string
calendar.listEvents
annotations: none low

Lists events from a calendar. Defaults to upcoming events.

calendar.getEvent
annotations: none low

Gets the details of a specific calendar event.

eventId string
calendar.findFreeTime
annotations: none low

Finds a free time slot for multiple people to meet.

calendar.updateEvent
annotations: none low

Updates an existing event in a calendar.

eventId string
calendar.respondToEvent
annotations: none low

Responds to a meeting invitation (accept, decline, or tentative).

eventId string
calendar.deleteEvent
annotations: none low

Deletes an event from a calendar.

eventId string
chat.listSpaces
annotations: none low

Lists the spaces the user is a member of.

chat.findSpaceByName
annotations: none low

Finds a Google Chat space by its display name.

chat.sendMessage
annotations: none low

Sends a message to a Google Chat space.

message string
chat.getMessages
annotations: none low

Gets messages from a Google Chat space.

chat.sendDm
annotations: none low

Sends a direct message to a user.

message string
chat.findDmByEmail
annotations: none low

Finds a Google Chat DM space by a user's email address.

chat.listThreads
annotations: none low

Lists threads from a Google Chat space in reverse chronological order.

chat.setUpSpace
annotations: none low

Sets up a new Google Chat space with a display name and a list of members.

displayName string
gmail.search
annotations: none low

Search for emails in Gmail using query parameters.

gmail.get
annotations: none low

Get the full content of a specific email message.

messageId string
gmail.downloadAttachment
annotations: none low

Downloads an attachment from a Gmail message to a local file.

gmail.modify
annotations: none low

Modify a Gmail message. Supported modifications include: - Add labels to a message. - Remove labels from a message. There are a list of system labels that can be modified on a message: - INBOX: removing INBOX label removes the message from inbox and archives the message. - SPAM: adding SPAM label marks a message as spam. - TRASH: adding TRASH label moves a message to trash. - UNREAD: removing UNREAD label marks a message as read. - STARRED: adding STARRED label marks a message as starred. - IMPORTANT: adding IMPORTANT label marks a message as important.

gmail.batchModify
annotations: none low

Bulk modify up to 1,000 Gmail messages at once. Applies the same label changes to all specified messages in a single API call. This is much more efficient than modifying messages individually. - Add labels to messages. - Remove labels from messages. System labels that can be modified: - INBOX: removing INBOX label archives messages. - SPAM: adding SPAM label marks messages as spam. - TRASH: adding TRASH label moves messages to trash. - UNREAD: removing UNREAD label marks messages as read. - STARRED: adding STARRED label marks messages as starred. - IMPORTANT: adding IMPORTANT label marks messages as important.

gmail.modifyThread
annotations: none low

Modify labels on all messages in a Gmail thread. This applies label changes to every message in the thread at once, which is useful for operations like marking an entire conversation as read. System labels that can be modified: - INBOX: removing INBOX label archives the thread. - SPAM: adding SPAM label marks the thread as spam. - TRASH: adding TRASH label moves the thread to trash. - UNREAD: removing UNREAD label marks all messages in the thread as read. - STARRED: adding STARRED label marks the thread as starred. - IMPORTANT: adding IMPORTANT label marks the thread as important.

threadId string
gmail.send
annotations: none low

Send an email message.

gmail.createDraft
annotations: none low

Create a draft email message.

gmail.sendDraft
annotations: none low

Send a previously created draft email.

draftId string
gmail.listLabels
annotations: none low

List all Gmail labels in the user's mailbox.

gmail.createLabel
annotations: none low

Create a new Gmail label. Labels help organize emails into categories.

name string
time.getCurrentDate
annotations: none low

Gets the current date. Returns both UTC (for calendar/API use) and local time (for display to the user), along with the timezone.

time.getCurrentTime
annotations: none low

Gets the current time. Returns both UTC (for calendar/API use) and local time (for display to the user), along with the timezone.

time.getTimeZone
annotations: none low

Gets the local timezone. Note: timezone is also included in getCurrentDate and getCurrentTime responses.

people.getUserProfile
annotations: none low

Gets a user's profile information.

people.getMe
annotations: none low

Gets the profile information of the authenticated user.

people.getUserRelations
annotations: none low

Gets a user's relations (e.g., manager, spouse, assistant, etc.). Common relation types include: manager, assistant, spouse, partner, relative, mother, father, parent, sibling, child, friend, domesticPartner, referredBy. Defaults to the authenticated user if no userId is provided.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs.promises, path
shell high
Server uses shell capabilities via: child_process
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 146

low
Tool 'auth.clear' has no annotations annotation_checker · 100%
low
Tool 'auth.refreshToken' has no annotations annotation_checker · 100%
low
Tool 'docs.create' has no annotations annotation_checker · 100%
low
Tool 'docs.insertText' has no annotations annotation_checker · 100%
low
Tool 'docs.find' has no annotations annotation_checker · 100%
low
Tool 'drive.findFolder' has no annotations annotation_checker · 100%
low
Tool 'drive.createFolder' has no annotations annotation_checker · 100%
low
Tool 'docs.move' has no annotations annotation_checker · 100%
low
Tool 'docs.getText' has no annotations annotation_checker · 100%
low
Tool 'docs.appendText' has no annotations annotation_checker · 100%
low
Tool 'docs.replaceText' has no annotations annotation_checker · 100%
low
Tool 'docs.extractIdFromUrl' has no annotations annotation_checker · 100%
low
Tool 'slides.getText' has no annotations annotation_checker · 100%
low
Tool 'slides.find' has no annotations annotation_checker · 100%
low
Tool 'slides.getMetadata' has no annotations annotation_checker · 100%
low
Tool 'slides.getImages' has no annotations annotation_checker · 100%
low
Tool 'slides.getSlideThumbnail' has no annotations annotation_checker · 100%
low
Tool 'sheets.getText' has no annotations annotation_checker · 100%
low
Tool 'sheets.getRange' has no annotations annotation_checker · 100%
low
Tool 'sheets.find' has no annotations annotation_checker · 100%
low
Tool 'sheets.getMetadata' has no annotations annotation_checker · 100%
low
Tool 'drive.search' has no annotations annotation_checker · 100%
low
Tool 'drive.downloadFile' has no annotations annotation_checker · 100%
low
Tool 'calendar.list' has no annotations annotation_checker · 100%
low
Tool 'calendar.createEvent' has no annotations annotation_checker · 100%
low
Tool 'calendar.listEvents' has no annotations annotation_checker · 100%
low
Tool 'calendar.getEvent' has no annotations annotation_checker · 100%
low
Tool 'calendar.findFreeTime' has no annotations annotation_checker · 100%
low
Tool 'calendar.updateEvent' has no annotations annotation_checker · 100%
low
Tool 'calendar.respondToEvent' has no annotations annotation_checker · 100%
low
Tool 'calendar.deleteEvent' has no annotations annotation_checker · 100%
low
Tool 'chat.listSpaces' has no annotations annotation_checker · 100%
low
Tool 'chat.findSpaceByName' has no annotations annotation_checker · 100%
low
Tool 'chat.sendMessage' has no annotations annotation_checker · 100%
low
Tool 'chat.getMessages' has no annotations annotation_checker · 100%
low
Tool 'chat.sendDm' has no annotations annotation_checker · 100%
low
Tool 'chat.findDmByEmail' has no annotations annotation_checker · 100%
low
Tool 'chat.listThreads' has no annotations annotation_checker · 100%
low
Tool 'chat.setUpSpace' has no annotations annotation_checker · 100%
low
Tool 'gmail.search' has no annotations annotation_checker · 100%
low
Tool 'gmail.get' has no annotations annotation_checker · 100%
low
Tool 'gmail.downloadAttachment' has no annotations annotation_checker · 100%
low
Tool 'gmail.modify' has no annotations annotation_checker · 100%
low
Tool 'gmail.batchModify' has no annotations annotation_checker · 100%
low
Tool 'gmail.modifyThread' has no annotations annotation_checker · 100%
low
Tool 'gmail.send' has no annotations annotation_checker · 100%
low
Tool 'gmail.createDraft' has no annotations annotation_checker · 100%
low
Tool 'gmail.sendDraft' has no annotations annotation_checker · 100%
low
Tool 'gmail.listLabels' has no annotations annotation_checker · 100%
low
Tool 'gmail.createLabel' has no annotations annotation_checker · 100%
low
Tool 'time.getCurrentDate' has no annotations annotation_checker · 100%
low
Tool 'time.getCurrentTime' has no annotations annotation_checker · 100%
low
Tool 'time.getTimeZone' has no annotations annotation_checker · 100%
low
Tool 'people.getUserProfile' has no annotations annotation_checker · 100%
low
Tool 'people.getMe' has no annotations annotation_checker · 100%
low
Tool 'people.getUserRelations' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.3 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.3 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-39q2-94rc-95cp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-76mc-f452-cxcm) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-cj63-jhhr-wcxv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-cjmm-f4jc-qw8r) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-cmwh-pvxp-8882) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-crv5-9vww-q3g8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-gvmj-g25r-r7wr) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-h7mw-gpvr-xq4m) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-h8r8-wccr-v5f2) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-hpcv-96wg-7vj8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-r47g-fvhr-h676) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-rp9w-3fw7-7cwq) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-v2wj-7wpq-c8vv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-v9jr-rg53-9pgp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-vxr8-fq34-vvx9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-x4vx-rjvf-j5p4) dependency_analyzer · 95%
medium
Buffer.from base64 in jrenaldi79-google-workspace-mcp-4fe8468/src/utils/MimeHelper.ts:211 entropy_analyzer · 75%
medium
Buffer.from base64 in jrenaldi79-google-workspace-mcp-4fe8468/src/services/GmailService.ts:726 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: auth.clear manifest_parser · 85%
info
Tool: auth.refreshToken manifest_parser · 85%
info
Tool: docs.create manifest_parser · 85%
info
Tool: docs.insertText manifest_parser · 85%
info
Tool: docs.find manifest_parser · 85%
info
Tool: drive.findFolder manifest_parser · 85%
info
Tool: drive.createFolder manifest_parser · 85%
info
Tool: docs.move manifest_parser · 85%
info
Tool: docs.getText manifest_parser · 85%
info
Tool: docs.appendText manifest_parser · 85%
info
Tool: docs.replaceText manifest_parser · 85%
info
Tool: docs.extractIdFromUrl manifest_parser · 85%
info
Tool: slides.getText manifest_parser · 85%
info
Tool: slides.find manifest_parser · 85%
info
Tool: slides.getMetadata manifest_parser · 85%
info
Tool: slides.getImages manifest_parser · 85%
info
Tool: slides.getSlideThumbnail manifest_parser · 85%
info
Tool: sheets.getText manifest_parser · 85%
info
Tool: sheets.getRange manifest_parser · 85%
info
Tool: sheets.find manifest_parser · 85%
info
Tool: sheets.getMetadata manifest_parser · 85%
info
Tool: drive.search manifest_parser · 85%
info
Tool: drive.downloadFile manifest_parser · 85%
info
Tool: calendar.list manifest_parser · 85%
info
Tool: calendar.createEvent manifest_parser · 85%
info
Tool: calendar.listEvents manifest_parser · 85%
info
Tool: calendar.getEvent manifest_parser · 85%
info
Tool: calendar.findFreeTime manifest_parser · 85%
info
Tool: calendar.updateEvent manifest_parser · 85%
info
Tool: calendar.respondToEvent manifest_parser · 85%
info
Tool: calendar.deleteEvent manifest_parser · 85%
info
Tool: chat.listSpaces manifest_parser · 85%
info
Tool: chat.findSpaceByName manifest_parser · 85%
info
Tool: chat.sendMessage manifest_parser · 85%
info
Tool: chat.getMessages manifest_parser · 85%
info
Tool: chat.sendDm manifest_parser · 85%
info
Tool: chat.findDmByEmail manifest_parser · 85%
info
Tool: chat.listThreads manifest_parser · 85%
info
Tool: chat.setUpSpace manifest_parser · 85%
info
Tool: gmail.search manifest_parser · 85%
info
Tool: gmail.get manifest_parser · 85%
info
Tool: gmail.downloadAttachment manifest_parser · 85%
info
Tool: gmail.modify manifest_parser · 85%
info
Tool: gmail.batchModify manifest_parser · 85%
info
Tool: gmail.modifyThread manifest_parser · 85%
info
Tool: gmail.send manifest_parser · 85%
info
Tool: gmail.createDraft manifest_parser · 85%
info
Tool: gmail.sendDraft manifest_parser · 85%
info
Tool: gmail.listLabels manifest_parser · 85%
info
Tool: gmail.createLabel manifest_parser · 85%
info
Tool: time.getCurrentDate manifest_parser · 85%
info
Tool: time.getCurrentTime manifest_parser · 85%
info
Tool: time.getTimeZone manifest_parser · 85%
info
Tool: people.getUserProfile manifest_parser · 85%
info
Tool: people.getMe manifest_parser · 85%
info
Tool: people.getUserRelations manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 309 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%