daviiiL/gmail-mcp-server-typescript-autogenerated
gmail-mcp-server-typescript
An authenticating proxy that bridges Google's remote Gmail MCP server with OAuth token refresh, letting MCP clients use static credentials to access Gmail.
DECISION SUMMARY
Block For Production
Score
56.2
Rank suppressed while production readiness shows a blocking verdict.
Confidence
High
Based on evidence completeness, recency, and validation density.
Evidence age
8.3h old
Freshness: fresh. Snapshot
trustsnap_b2c0c95bd3f84b1e.Top risk drivers
- Utility Coverage
- Step Up Auth
- Resource Contract
Recommended actions
- Add an explicit confirm/dry-run parameter or two-step confirmation flow to write, delete, exec, and egress-capable tool…
- Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.
- Serve /.well-known/oauth-protected-resource and point it at your authorization server metadata.
Next action
revalidate, add safeguards, export policy
write/admin actions need confirmation safeguards + high-risk tools need review + score below evaluation threshold
Observed Attention
No observed attention
No observed attention in the current 30-day window.
- No segmented attention signals observed in the current window.
Bucketed signal based on recent segmented Verify telemetry. Crawler and evaluator activity is not treated as confirmed human demand.
Status
Healthy
Score
56.2
Transport
streamable-http
Tools
13
DISPUTE THIS ASSESSMENT
Dispute this assessment
If any published claim about this server -- its score, a risk flag, a capability classification, or its taxonomy -- is factually wrong, tell us what evidence shows and we will review it. This does not require claiming or verifying ownership of the server first.
Verify responds to disputes within 5 business days and resolves them within 15.
Dispute history
No disputes filed for this server.
Risk
Security posture
Tools analyzed
13
High-risk tools
2
Destructive tools
4
Exec tools
0
Egress tools
0
Secret tools
2
Bulk-access tools
2
Risk distribution
low:3, medium:8, high:2
Tool capability & risk inventory
| Tool | Capabilities | Risk | Findings | Notes |
|---|---|---|---|---|
create_draft |
write | Medium | none | No explicit safeguard hints detected. |
list_drafts |
read secrets export | High | bulk data access secret material access freeform input surface | Safeguards hinted in metadata. |
get_thread |
read | Low | none | No explicit safeguard hints detected. |
get_message |
read | Low | none | No explicit safeguard hints detected. |
search_threads |
read secrets export financial | High | bulk data access secret material access freeform input surface | Safeguards hinted in metadata. |
label_thread |
write | Medium | none | No explicit safeguard hints detected. |
unlabel_thread |
write delete | Medium | destructive operation | No explicit safeguard hints detected. |
apply_sensitive_thread_label |
write delete | Medium | destructive operation | No explicit safeguard hints detected. |
list_labels |
read | Low | none | No explicit safeguard hints detected. |
label_message |
write | Medium | none | No explicit safeguard hints detected. |
unlabel_message |
write delete | Medium | destructive operation | No explicit safeguard hints detected. |
apply_sensitive_message_label |
write delete | Medium | destructive operation | No explicit safeguard hints detected. |
create_label |
write | Medium | none | No explicit safeguard hints detected. |
Write-action governance
Governance status
Error
Safe to publish
Auth boundary
public_or_unclear
Blast radius
High
High-risk tools
2
Confirmation signals
none
Safeguard count
2
Status detail: 2 high-risk tool(s), 4 destructive tool(s) are exposed without a clear auth boundary; 2 safeguard(s) and 0 confirmation signal(s) detected.
| Tool | Risk | Flags | Safeguards |
|---|---|---|---|
list_drafts |
High | bulk data access secret material access freeform input surface | yes |
search_threads |
High | bulk data access secret material access freeform input surface | yes |
Action-controls diff
Snapshot changed
yes
Disabled-by-default candidates
apply_sensitive_message_label apply_sensitive_thread_label list_drafts search_threads unlabel_message unlabel_thread
Manual review candidates
apply_sensitive_message_label apply_sensitive_thread_label list_drafts search_threads unlabel_message unlabel_thread
New actions
| Action | Risk | Flags |
|---|---|---|
apply_sensitive_message_label | Medium | destructive operation |
apply_sensitive_thread_label | Medium | destructive operation |
create_draft | Medium | none |
create_label | Medium | none |
get_message | Low | none |
get_thread | Low | none |
label_message | Medium | none |
label_thread | Medium | none |
list_drafts | High | bulk data access secret material access freeform input surface |
list_labels | Low | none |
search_threads | High | bulk data access secret material access freeform input surface |
unlabel_message | Medium | destructive operation |
unlabel_thread | Medium | destructive operation |
Changed actions
| Action | Change types | Risk |
|---|---|---|
| No materially changed actions. | ||
Critical alerts
High/critical-severity alerts
3
Production verdicts degrade quickly when high or critical-severity alerts are active.
Compatibility
Client compatibility verdicts
Client compatibility only means the server shape can work with a client. Production trust decision and write-action publishing are evaluated separately so a client-compatible server can still be blocked for production.
Client compatibility: ChatGPT
Partially client-compatible
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; OAuth interoperability should be strong.
Confidence: high (78.75)
Evidence provenance
Winner: live_validation
Supporting sources: live_validation, history, server_card
Disagreements: none
initialize• OKtools_list• OKtransport_compliance_probe• Warningstep_up_auth_probe• Missingconnector_replay_probe• OK — Frozen tool snapshots must survive refresh.request_association_probe• Missing — Roots, sampling, and elicitation should stay request-scoped.
Client compatibility: Claude
Client-compatible
No major blockers detected.
Confidence: high (78.75)
Evidence provenance
Winner: live_validation
Supporting sources: live_validation, history, server_card
Disagreements: none
initialize• OKtools_list• OKtransport_compliance_probe• Warning
Write-action publishing
Publishing blocked
action_safety_probe reported an unconfirmed high-risk, destructive, or exec-capable tool. Risky write actions are present without a clear auth boundary and confirmation signal. Active alert(s) affecting production readiness: Tool snapshot changed, Auth mode changed, Write-action surface expanded.
Confidence: high (78.75)
Evidence provenance
Winner: live_validation
Supporting sources: live_validation, history
Disagreements: none
action_safety_probe• Error
Snapshot churn risk
Medium
The live tool surface changed between recent validations.
Confidence: high (78.75)
Evidence provenance
Winner: history
Supporting sources: history, live_validation
Disagreements: none
tool_snapshot_probe• OKconnector_replay_probe• OK
Client compatibility gate details
ChatGPT custom connector
Partially client-compatible
Remediation checklist
OpenAI connectors expect OAuth for remote server auth.Dynamic client registration materially improves connector setup.OAuth interoperability should be strong.The tool surface is not limited to search/fetch-style read tools.This client profile expects a read/search-only tool surface, but write, delete, or exec-capable tools are present.OAuth is not configured, so this client cannot authenticate without additional setup.
Claude remote MCP
Client-compatible
Remediation checklist
The tool surface is not limited to search/fetch-style read tools.This client profile expects a read/search-only tool surface, but write, delete, or exec-capable tools are present.OAuth is not configured, so this client cannot authenticate without additional setup.A connector refresh would break existing tool references (new required arguments or removed tools) -- an admin must re-approve the connector before this is safe.Not yet safe for company-knowledge use: requires a search/fetch-only surface with no export, bulk, mutating, or high-blast-radius exposure.Not yet safe for the Messages API remote MCP path: requires OAuth, a compatible connector profile, and no pending connector-refresh risk.
Write-safe publishing
Blocked
Remediation checklist
Add a clearer auth boundary around risky write actions.Add confirmation or dry-run semantics for: create_draft, label_thread, unlabel_thread, apply_sensitive_thread_label, label_message.The write/destructive action surface just expanded since the last validation -- review before publishing.Production readiness is blocked by an active alert: Tool snapshot changed.Production readiness is blocked by an active alert: Auth mode changed.Production readiness is blocked by an active alert: Write-action surface expanded.
Verdict traces
Production verdict
Needs remediation
Current validation evidence shows operational or discovery gaps that should be fixed first.
Confidence: high (78.75)
Winning source: live_validation
Triggering alerts
tool_snapshot_changed• high • Tool snapshot changedauth_mode_changed• high • Auth mode changedwrite_action_surface_expanded• high • Write-action surface expanded
Client verdict trace table
| Verdict | Status | Checks | Winning source | Conflicts |
|---|---|---|---|---|
openai_connectors |
Partially client-compatible | initialize, tools_list, transport_compliance_probe, step_up_auth_probe, connector_replay_probe, request_association_probe | live_validation | none |
claude_desktop |
Client-compatible | initialize, tools_list, transport_compliance_probe | live_validation | none |
unsafe_for_write_actions |
Publishing blocked | action_safety_probe | live_validation | none |
snapshot_churn_risk |
Medium | tool_snapshot_probe, connector_replay_probe | history | none |
Publishability policy profiles
ChatGPT custom connector compatibility
Compatible with review
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; OAuth interoperability should be strong. Compatibility is not a production approval; company knowledge and Messages API gates remain separate.
- Search Fetch Only: No
- Write Actions Present: Yes
- Oauth Configured: No
- Admin Refresh Required: Yes
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
Claude remote MCP compatibility
Connector-compatible
Transport, discovery, and remote-MCP assumptions are satisfied. Compatibility is not a production approval; company knowledge and Messages API gates remain separate.
- Search Fetch Only: No
- Write Actions Present: Yes
- Oauth Configured: No
- Admin Refresh Required: Yes
- Safe For Company Knowledge: No
- Safe For Messages Api Remote Mcp: No
Compatibility fixtures
ChatGPT custom connector fixture
Degraded
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; OAuth interoperability should be strong.
- remote_http_endpoint: Passes
- oauth_discovery: Degraded
- frozen_tool_snapshot_refresh: Passes
- request_association: Passes
Anthropic remote MCP fixture
Degraded
Remote MCP transport and discovery assumptions are satisfied.
- remote_transport: Passes
- tool_discovery: Passes
- auth_connect: Passes
- safe_write_review: Degraded
Recommended for
Claude Desktop
Claude Desktop is marked compatible with score 100.
Smithery
Smithery is marked compatible with score 80.
Generic Streamable HTTP
Generic Streamable HTTP is marked compatible with score 100.
Evidence
Current trust snapshot
Snapshot ID
trustsnap_b2c0c95bd3f84b1eUse this ID to compare server page, report, policy, MCP, homepage, ranking, and shortlist surfaces.
Snapshot generated
Aug 10, 2026 01:27:48 PM UTC
All page, report, policy, and MCP surfaces use this same server-detail snapshot shape.
Last validated
Aug 10, 2026 05:10:01 AM UTC
Age: 8.3h • evidence age tier: Verified in last 24h • display score: 56.25
Canonical machine links
Compare index
Human compare URL
Evidence confidence
Confidence score
78.8
Based on 3 recent validations, 27 captured checks, and validation age of 8.3 hours.
Live checks captured
27
More direct checks increase trust in the current verdict.
Validation age
8.3h
Lower age means fresher evidence.
Latest validation evidence
Latest summary
Healthy
Validation profile
remote_mcp
Started
Aug 10, 2026 05:10:00 AM UTC
Latency
1432.9 ms
Failures
oauth_authorization_serverno authorization serveroauth_protected_resourceClient error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404openid_configurationno authorization serverserver_cardClient error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404
Checks
| Check | Status | Latency | Evidence |
|---|---|---|---|
action_safety_probe |
Error | n/a | 2 high-risk, 4 destructive tool(s); no clear auth boundary; safeguards=2; confirmation=none. |
advanced_capabilities_probe |
Warning | n/a | Only 2 capability signal(s): prompts, structured outputs. |
connector_publishability_probe |
Warning | n/a | Publishability blockers: action safety, server card. |
connector_replay_probe |
OK | n/a | Backward compatible with no breaking tool-surface changes. |
determinism_probe |
OK | 139.3 ms | Check completed |
initialize |
OK | 132.4 ms | Protocol 2025-03-26 |
interactive_flow_probe |
Missing | n/a | Check completed |
oauth_authorization_server |
Missing | n/a | no authorization server |
oauth_protected_resource |
Error | 142.6 ms | Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404 |
official_registry_probe |
Missing | n/a | Check completed |
openid_configuration |
Missing | n/a | no authorization server |
probe_noise_resilience |
OK | 144.0 ms | Fetched https://gmailmcp.googleapis.com/robots.txt |
prompt_get |
Missing | n/a | not advertised |
prompts_list |
OK | 116.2 ms | 0 prompt(s) exposed |
protocol_version_probe |
Warning | n/a | Claims 2025-03-26; 2 release(s) behind 2025-11-25. |
provenance_divergence_probe |
Not_Assessed | n/a | Check completed |
request_association_probe |
Missing | n/a | No request-association capabilities were advertised. |
resource_read |
Missing | n/a | not advertised |
resources_list |
Missing | 33.2 ms | Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/mcp/v1' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404 |
schema_divergence_probe |
Missing | n/a | no server card tools |
server_card |
Error | 116.0 ms | Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/mcp/server-card.json' For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404 |
session_resume_probe |
Warning | n/a | no session id |
step_up_auth_probe |
Missing | n/a | No OAuth or incremental-scope signals detected. |
tool_snapshot_probe |
OK | n/a | Check completed |
tools_list |
OK | 105.2 ms | 13 tool(s) exposed |
transport_compliance_probe |
Warning | 103.1 ms | Issues: missing session id, missing protocol header (bad protocol=400). |
utility_coverage_probe |
Missing | 117.7 ms | No completions evidence; no pagination evidence; tasks missing. |
Raw evidence view
Show raw JSON evidence
{
"checks": {
"action_safety_probe": {
"details": {
"auth_present": false,
"confirmation_signals": [],
"reason": null,
"safeguard_count": 2,
"summary": {
"annotation_conflict_tools": 2,
"bulk_access_tools": 2,
"capability_distribution": {
"delete": 4,
"export": 2,
"financial": 1,
"read": 5,
"secrets": 2,
"write": 8
},
"declared_non_read_only_tools": 8,
"destructive_tools": 4,
"egress_tools": 0,
"exec_tools": 0,
"has_mutating_capability": true,
"has_non_read_capability": true,
"high_risk_tools": 2,
"risk_distribution": {
"critical": 0,
"high": 2,
"low": 3,
"medium": 8
},
"secret_tools": 2,
"tool_count": 13
}
},
"latency_ms": null,
"status": "error"
},
"advanced_capabilities_probe": {
"details": {
"capabilities": {
"completions": false,
"elicitation": false,
"prompts": true,
"resource_links": false,
"resources": false,
"roots": false,
"sampling": false,
"structured_outputs": true
},
"enabled": [
"prompts",
"structured_outputs"
],
"enabled_count": 2,
"initialize_capability_keys": [
"prompts",
"tools"
]
},
"latency_ms": null,
"status": "warning"
},
"connector_publishability_probe": {
"details": {
"blockers": [
"action_safety",
"server_card"
],
"criteria": {
"action_safety": false,
"auth_flow": true,
"connector_replay": true,
"initialize": true,
"protocol_version": true,
"remote_transport": true,
"request_association": true,
"server_card": false,
"session_resume": true,
"step_up_auth": true,
"tool_surface": true,
"tools_list": true,
"transport_compliance": true
},
"high_risk_tools": 2,
"tool_count": 13,
"transport": "streamable-http"
},
"latency_ms": null,
"status": "warning"
},
"connector_replay_probe": {
"details": {
"added_tools": [],
"additive_output_changes": [],
"backward_compatible": true,
"output_breaks": [],
"removed_tools": [],
"required_arg_breaks": [],
"would_break_after_refresh": false
},
"latency_ms": null,
"status": "ok"
},
"determinism_probe": {
"details": {
"attempts": 2,
"baseline_signature": "ef723ba2b4b995549eaad87287ba9b7b2f5efa63650abb01844436e80fcaf5da",
"errors": [],
"matches": 2,
"stable_ratio": 1.0,
"successful": 2
},
"latency_ms": 139.26,
"status": "ok"
},
"initialize": {
"details": {
"headers": {
"content-type": "application/json; charset=UTF-8"
},
"http_status": 200,
"payload": {
"id": 1,
"jsonrpc": "2.0",
"result": {
"capabilities": {
"prompts": {
"listChanged": false
},
"tools": {
"listChanged": false
}
},
"protocolVersion": "2025-03-26",
"serverInfo": {
"name": "StatelessServer",
"version": "ESF"
}
}
},
"url": "https://gmailmcp.googleapis.com/mcp/v1"
},
"latency_ms": 132.39,
"status": "ok"
},
"interactive_flow_probe": {
"details": {
"oauth_supported": false,
"prompt_available": false,
"risk_hits": [],
"safe_hits": []
},
"latency_ms": null,
"status": "missing"
},
"oauth_authorization_server": {
"details": {
"reason": "no_authorization_server"
},
"latency_ms": null,
"status": "missing"
},
"oauth_protected_resource": {
"details": {
"error": "Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"url": "https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource"
},
"latency_ms": 142.62,
"status": "error"
},
"official_registry_probe": {
"details": {
"direct_match": false,
"official_peer_count": 0,
"registry_source": "glama_registry"
},
"latency_ms": null,
"status": "missing"
},
"openid_configuration": {
"details": {
"reason": "no_authorization_server"
},
"latency_ms": null,
"status": "missing"
},
"probe_noise_resilience": {
"details": {
"headers": {
"content-type": "text/html; charset=UTF-8"
},
"http_status": 404,
"url": "https://gmailmcp.googleapis.com/robots.txt",
"validation_disallowed": false
},
"latency_ms": 143.96,
"status": "ok"
},
"prompt_get": {
"details": {
"reason": "not_advertised"
},
"latency_ms": null,
"status": "missing"
},
"prompts_list": {
"details": {
"headers": {
"content-type": "application/json; charset=UTF-8"
},
"http_status": 200,
"payload": {
"id": 3,
"jsonrpc": "2.0",
"result": {
"prompts": []
}
},
"url": "https://gmailmcp.googleapis.com/mcp/v1"
},
"latency_ms": 116.16,
"status": "ok"
},
"protocol_version_probe": {
"details": {
"claimed_version": "2025-03-26",
"lag_days": 244,
"latest_known_version": "2025-11-25",
"releases_behind": 2,
"validator_protocol_version": "2025-03-26"
},
"latency_ms": null,
"status": "warning"
},
"provenance_divergence_probe": {
"details": {
"comparable_field_count": 0,
"compared_fields": [
"title",
"version",
"homepage",
"repository"
],
"direct_official_match": false,
"drift_fields": [],
"metadata_document_count": 1,
"readable_sources": [],
"registry_homepage": null,
"registry_repository": null,
"registry_title": null,
"registry_version": null,
"server_card_homepage": null,
"server_card_repository": null,
"server_card_title": null,
"server_card_version": null
},
"latency_ms": null,
"status": "not_assessed"
},
"request_association_probe": {
"details": {
"reason": "no_request_association_capabilities_advertised"
},
"latency_ms": null,
"status": "missing"
},
"resource_read": {
"details": {
"reason": "not_advertised"
},
"latency_ms": null,
"status": "missing"
},
"resources_list": {
"details": {
"error": "Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/mcp/v1'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"headers": {
"content-type": "text/html; charset=UTF-8"
},
"http_status": 404,
"payload": {},
"reason": "not_supported",
"url": "https://gmailmcp.googleapis.com/mcp/v1"
},
"latency_ms": 33.17,
"status": "missing"
},
"schema_divergence_probe": {
"details": {
"card_server_name": null,
"compared_dimensions": [
"server_name",
"server_version",
"declared_vs_observed_auth",
"tool_membership",
"parameter_names",
"required_parameters",
"parameter_types",
"output_schema_presence"
],
"compared_tool_count": 0,
"live_server_name": "StatelessServer",
"reason": "no_server_card_tools",
"server_name_mismatch": false
},
"latency_ms": null,
"status": "missing"
},
"server_card": {
"details": {
"error": "Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"url": "https://gmailmcp.googleapis.com/.well-known/mcp/server-card.json"
},
"latency_ms": 115.99,
"status": "error"
},
"session_resume_probe": {
"details": {
"protocol_version": "2025-03-26",
"reason": "no_session_id",
"resume_expected": true,
"transport": "streamable-http"
},
"latency_ms": null,
"status": "warning"
},
"step_up_auth_probe": {
"details": {
"auth_required_checks": [],
"broad_scopes": [],
"challenge_headers": [],
"minimal_scope_documented": false,
"oauth_present": false,
"scope_specificity_ratio": 0.0,
"step_up_signals": [],
"supported_scopes": []
},
"latency_ms": null,
"status": "missing"
},
"tool_snapshot_probe": {
"details": {
"added": [],
"changed_outputs": [],
"current_tool_count": 13,
"previous_tool_count": 13,
"removed": [],
"similarity": 1.0
},
"latency_ms": null,
"status": "ok"
},
"tools_list": {
"details": {
"headers": {
"content-type": "application/json; charset=UTF-8"
},
"http_status": 200,
"payload": {
"id": 2,
"jsonrpc": "2.0",
"result": {
"tools": [
{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Create draft email"
},
"description": "Creates a new draft email in the authenticated user's Gmail account.\n\nThis tool takes recipient addresses, a subject, and body content as inputs. If the draft is created as a reply to an existing message, the ID of the original message should be passed to the tool in the replyToMessageId field.\n\nReturns a Draft object with only the `id` field populated.\n",
"inputSchema": {
"$defs": {
"Attachment": {
"description": "Represents an attachment to be included in an email.",
"properties": {
"content": {
"description": "Required. The base64-encoded content of the attachment.",
"format": "byte",
"type": "string"
},
"filename": {
"description": "Optional. The name of the file to be attached, e.g. \"invoice.pdf\". For inline attachments, this is used for Content-ID generation. For regular attachments, filename is used to specify the filename to email clients. If not provided, the attachment may be received with no name.",
"type": "string"
},
"id": {
"description": "Optional. Output only. When present, contains the ID of an external attachment that can be retrieved in a separate `GetMessageAttachment` request.",
"readOnly": true,
"type": "string"
},
"inline": {
"description": "Optional. If true, this attachment is handled as inline. An inline attachment is a content that is intended to be displayed within the body of an HTML email, as opposed to being listed as a separate file for download. If false or absent, defaults to false, and it's treated as a regular attachment.",
"type": "boolean"
},
"mimeType": {
"description": "Optional. The field representing a content or media type must use IANA MIME type, https://www.iana.org/assignments/media-types/media-types.xhtml. If not provided, defaults to \"application/octet-stream\".",
"type": "string"
}
},
"required": [
"content"
],
"type": "object"
}
},
"description": "Request message for CreateDraft RPC.",
"properties": {
"attachments": {
"description": "Optional. The attachments to include in the email. The combined size of attachments in the message cannot exceed 25MB. If you need to send files larger than 25MB, upload the file to Drive first and then insert the Drive link into `body` or `html_body`.",
"items": {
"$ref": "#/$defs/Attachment"
},
"type": "array"
},
"bcc": {
"description": "Optional. The blind carbon copy recipients of the email draft. Each string MUST be a valid plain email address (e.g., \"user@example.com\"). The \"Name \" format is NOT supported by this tool.",
"items": {
"type": "string"
},
"type": "array"
},
"body": {
"description": "Optional. The main body content of the email draft. If `html_body` is also provided, this field is treated as the plain-text alternative.",
"type": "string"
},
"cc": {
"description": "Optional. The carbon copy recipients of the email draft. Each string MUST be a valid plain email address (e.g., \"user@example.com\"). The \"Name \" format is NOT supported by this tool.",
"items": {
"type": "string"
},
"type": "array"
},
"htmlBody": {
"description": "The HTML content of the email draft. If provided, this will be used as the rich-text version of the email.",
"type": "string"
},
"replyToMessageId": {
"description": "Optional. The ID of the message to reply to. If provided, this will be used as the reply-to message ID for the email draft, and the `body` and `html_body` will be appended to the original message body.",
"type": "string"
},
"subject": {
"description": "Optional. The subject line of the email. Defaults to empty if not provided.",
"type": "string"
},
"to": {
"description": "Optional. The primary recipients of the email draft. Each string MUST be a valid plain email address (e.g., \"user@example.com\"). The \"Name \" format is NOT supported by this tool.",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"name": "create_draft",
"outputSchema": {
"description": "Details of a draft.",
"properties": {
"bccRecipients": {
"description": "List of 'Bcc' recipient email addresses extracted from headers.",
"items": {
"type": "string"
},
"type": "array"
},
"ccRecipients": {
"description": "List of 'Cc' recipient email addresses extracted from headers.",
"items": {
"type": "string"
},
"type": "array"
},
"date": {
"description": "Date of the draft in ISO 8601 format (YYYY-MM-DD).",
"type": "string"
},
"htmlBody": {
"description": "The HTML body content of the draft, if available.",
"type": "string"
},
"id": {
"description": "The unique identifier of the draft resource.",
"type": "string"
},
"plaintextBody": {
"description": "Plain text body content, if available.",
"type": "string"
},
"subject": {
"description": "The subject line of the draft message.",
"type": "string"
},
"threadId": {
"description": "The ID of the thread this draft belongs to.",
"type": "string"
},
"toRecipients": {
"description": "List of 'To' recipient email addresses extracted from headers.",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": true,
"title": "List draft emails"
},
"description": "Lists draft emails from the authenticated user's Gmail account.\n\nThis tool can filter drafts based on a query string and supports pagination. It returns a list of drafts, including their IDs and subjects (unless `view` is set to `DRAFT_VIEW_METADATA_ONLY`). `page_token` can be used to paginate the results. To retrieve subsequent pages of results, use the `page_token` returned in the previous response.\n\nThe `view` parameter controls which fields are populated in the response. By default (or with `DRAFT_VIEW_FULL`), it returns full content. Use `DRAFT_VIEW_METADATA_ONLY` to exclude sensitive content like subject and body. \n",
"inputSchema": {
"description": "Request message for ListDrafts RPC.",
"properties": {
"pageSize": {
"description": "Optional. The maximum number of drafts to return. If unspecified, defaults to 20. The maximum allowed value is 50.",
"format": "int32",
"type": "integer"
},
"pageToken": {
"description": "Optional. A token received from a previous list_drafts call to retrieve the next page of results. Leave empty to fetch the first page. This is primarily used for pagination to continue fetching results from where the previous `ListDraft` call left off, especially when the number of drafts matching the query exceeds the page_size limit.",
"type": "string"
},
"query": {
"description": "Examples: - `subject:OneMCP Update` - `from:gduser1@workspacesamples.dev` - `to:gduser2@workspacesamples.dev AND newer_than:7d` - `project proposal has:attachment` - `is:unread` A space or a dash (`-`) will separate a number while a dot (`.`) will be a decimal. For example, `01.2047-100` is considered two numbers: `01.2047` and `100`. Note: If we want to ensure all drafts for the query are returned, we can paginate the results by making repeated calls to the tool until the response contains an empty list of drafts.",
"type": "string"
},
"view": {
"description": "Optional. Controls the fields populated for drafts in the draft list. Defaults to returning metadata only (`id`, `thread_id`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`). Set to `DRAFT_VIEW_FULL` to include `subject` and `plaintext_body` content.",
"enum": [
"DRAFT_VIEW_UNSPECIFIED",
"DRAFT_VIEW_METADATA_ONLY",
"DRAFT_VIEW_FULL"
],
"type": "string",
"x-google-enum-descriptions": [
"Unspecified view. Defaults to DRAFT_VIEW_METADATA_ONLY.",
"Returns metadata only (`id`, `thread_id`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`); omits `subject` and `plaintext_body` content.",
"Returns full draft content, including `subject` and `plaintext_body` in addition to draft metadata."
]
}
},
"type": "object"
},
"name": "list_drafts",
"outputSchema": {
"$defs": {
"Draft": {
"description": "Details of a draft.",
"properties": {
"bccRecipients": {
"description": "List of 'Bcc' recipient email addresses extracted from headers.",
"items": {
"type": "string"
},
"type": "array"
},
"ccRecipients": {
"description": "List of 'Cc' recipient email addresses extracted from headers.",
"items": {
"type": "string"
},
"type": "array"
},
"date": {
"description": "Date of the draft in ISO 8601 format (YYYY-MM-DD).",
"type": "string"
},
"htmlBody": {
"description": "The HTML body content of the draft, if available.",
"type": "string"
},
"id": {
"description": "The unique identifier of the draft resource.",
"type": "string"
},
"plaintextBody": {
"description": "Plain text body content, if available.",
"type": "string"
},
"subject": {
"description": "The subject line of the draft message.",
"type": "string"
},
"threadId": {
"description": "The ID of the thread this draft belongs to.",
"type": "string"
},
"toRecipients": {
"description": "List of 'To' recipient email addresses extracted from headers.",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
}
},
"description": "Response message for ListDrafts RPC.",
"properties": {
"drafts": {
"description": "List of drafts.",
"items": {
"$ref": "#/$defs/Draft"
},
"type": "array"
},
"nextPageToken": {
"description": "A token that can be used in a subsequent call to retrieve the next page of drafts. If the number of drafts matching the query exceeds the page_size limit, the response will contain a `next_page_token`. To retrieve the next page of results, pass this token in the `page_token` field of the next `ListDraftsRequest`.",
"type": "string"
}
},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true,
"title": "Get email thread"
},
"description": "Retrieves a specific email thread from the authenticated user's Gmail account, including a list of its messages.\n\nThe optional `messageFormat` parameter controls the format of the messages returned. By default (or with `FULL_CONTENT`), it returns the full content of messages. Use `MINIMAL` to include only subject and snippet (excluding body). Use `METADATA_ONLY` to include only basic metadata (message ID, thread ID, labels, timestamp, and size estimate). \n",
"inputSchema": {
"description": "Request message for GetThread RPC.",
"properties": {
"messageFormat": {
"description": "Optional. Specifies the format of the messages returned within the thread. Defaults to `FULL_CONTENT`. Note: `MINIMAL` format returns `id`, `snippet`, `subject`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`. `METADATA_ONLY` format returns `id`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`. `FULL_CONTENT` returns `id`, `snippet`, `subject`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`, `attachment_ids`, `plaintext_body`, `html_body`, `attachments`.",
"enum": [
"MESSAGE_FORMAT_UNSPECIFIED",
"MINIMAL",
"FULL_CONTENT",
"METADATA_ONLY"
],
"type": "string",
"x-google-enum-descriptions": [
"Defaults to FULL_CONTENT.",
"Returns message snippets and key headers (Subject, From, To, Cc, Date).",
"Returns all information in \"MINIMAL\" plus the full body content of each message.",
"Metadata only: does not include subject, snippet, body, attachment filenames."
]
},
"threadId": {
"description": "Required. The unique identifier of the thread to fetch.",
"type": "string"
}
},
"required": [
"threadId"
],
"type": "object"
},
"name": "get_thread",
"outputSchema": {
"$defs": {
"AttachmentMetadata": {
"description": "Represents an attachment associated with a message.",
"properties": {
"filename": {
"description": "The filename of the attachment.",
"type": "string"
},
"id": {
"description": "Output only. The ID of the attachment.",
"readOnly": true,
"type": "string"
},
"mimeType": {
"description": "The MIME type of the attachment.",
"type": "string"
}
},
"type": "object"
},
"Message": {
"description": "Message within a thread.",
"properties": {
"attachmentIds": {
"description": "Output only. The attachment ids, only populated if MessageFormat was FULL_CONTENT.",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"attachments": {
"description": "Output only. The attachments, only populated if MessageFormat was FULL_CONTENT.",
"items": {
"$ref": "#/$defs/AttachmentMetadata"
},
"readOnly": true,
"type": "array"
},
"bccRecipients": {
"description": "BCC recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
},
"ccRecipients": {
"description": "CC recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
},
"date": {
"description": "Date of the message in ISO 8601 format (YYYY-MM-DD).",
"type": "string"
},
"htmlBody": {
"description": "The HTML content of the email, only populated if MessageFormat was FULL_CONTENT.",
"type": "string"
},
"id": {
"description": "The unique identifier of the message.",
"type": "string"
},
"labelIds": {
"description": "The ids of the labels attached to the message. Includes ids of user labels and standard system labels limited to `INBOX`, `SPAM`, `TRASH`, `UNREAD`, `STARRED`, `IMPORTANT`, `SENT`, `DRAFT`, `CHAT`.",
"items": {
"type": "string"
},
"type": "array"
},
"plaintextBody": {
"description": "Full body content, only populated if MessageFormat was FULL_CONTENT.",
"type": "string"
},
"sender": {
"description": "Sender email address.",
"type": "string"
},
"snippet": {
"description": "Snippet of the message body.",
"type": "string"
},
"subject": {
"description": "The message subject extracted from headers:",
"type": "string"
},
"toRecipients": {
"description": "To recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
}
},
"description": "Thread containing a list of messages.",
"properties": {
"id": {
"description": "The unique identifier of the thread.",
"type": "string"
},
"messages": {
"description": "A list of messages in the thread, ordered chronologically.",
"items": {
"$ref": "#/$defs/Message"
},
"type": "array"
}
},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true,
"title": "Get email message"
},
"description": "Retrieves a specific email message from the authenticated user's Gmail account by its unique message ID.\n\nUse this tool to inspect a single, individual email when you already know its message ID. If the user wants to read a specific email in detail, check the exact wording of a message, or examine attachment metadata for a single email, this is the right tool. It is not suitable for retrieving entire conversations or viewing back-and-forth discussion threads; use the 'get_thread' tool instead.\nKey indicators include if the user asks for the full content of a specific message ID returned by a previous search, or if the query asks to inspect a specific individual email rather than an entire thread.\nExample user prompts are: \"Get the full text of message ID 18f123456789abcd.\", \"Read the latest message in that thread from Alice.\", and \"What are the attachment names in the email I just received from HR?\" \n\nThe optional `messageFormat` parameter controls the format of the message returned. By default (or with `FULL_CONTENT`), it returns the full content of the message. Use `MINIMAL` to include only subject and snippet (excluding body). Use `METADATA_ONLY` to include only basic metadata (message ID, thread ID, labels, timestamp, and size estimate). \n",
"inputSchema": {
"description": "Request message for GetMessage RPC.",
"properties": {
"messageFormat": {
"description": "Optional. Specifies the format of the message returned. Defaults to FULL_CONTENT.",
"enum": [
"MESSAGE_FORMAT_UNSPECIFIED",
"MINIMAL",
"FULL_CONTENT",
"METADATA_ONLY"
],
"type": "string",
"x-google-enum-descriptions": [
"Defaults to FULL_CONTENT.",
"Returns message snippets and key headers (Subject, From, To, Cc, Date).",
"Returns all information in \"MINIMAL\" plus the full body content of each message.",
"Metadata only: does not include subject, snippet, body, attachment filenames."
]
},
"messageId": {
"description": "Required. The unique identifier of the message to fetch.",
"type": "string"
}
},
"required": [
"messageId"
],
"type": "object"
},
"name": "get_message",
"outputSchema": {
"$defs": {
"AttachmentMetadata": {
"description": "Represents an attachment associated with a message.",
"properties": {
"filename": {
"description": "The filename of the attachment.",
"type": "string"
},
"id": {
"description": "Output only. The ID of the attachment.",
"readOnly": true,
"type": "string"
},
"mimeType": {
"description": "The MIME type of the attachment.",
"type": "string"
}
},
"type": "object"
}
},
"description": "Message within a thread.",
"properties": {
"attachmentIds": {
"description": "Output only. The attachment ids, only populated if MessageFormat was FULL_CONTENT.",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"attachments": {
"description": "Output only. The attachments, only populated if MessageFormat was FULL_CONTENT.",
"items": {
"$ref": "#/$defs/AttachmentMetadata"
},
"readOnly": true,
"type": "array"
},
"bccRecipients": {
"description": "BCC recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
},
"ccRecipients": {
"description": "CC recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
},
"date": {
"description": "Date of the message in ISO 8601 format (YYYY-MM-DD).",
"type": "string"
},
"htmlBody": {
"description": "The HTML content of the email, only populated if MessageFormat was FULL_CONTENT.",
"type": "string"
},
"id": {
"description": "The unique identifier of the message.",
"type": "string"
},
"labelIds": {
"description": "The ids of the labels attached to the message. Includes ids of user labels and standard system labels limited to `INBOX`, `SPAM`, `TRASH`, `UNREAD`, `STARRED`, `IMPORTANT`, `SENT`, `DRAFT`, `CHAT`.",
"items": {
"type": "string"
},
"type": "array"
},
"plaintextBody": {
"description": "Full body content, only populated if MessageFormat was FULL_CONTENT.",
"type": "string"
},
"sender": {
"description": "Sender email address.",
"type": "string"
},
"snippet": {
"description": "Snippet of the message body.",
"type": "string"
},
"subject": {
"description": "The message subject extracted from headers:",
"type": "string"
},
"toRecipients": {
"description": "To recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true,
"title": "Search email threads"
},
"description": "Lists email threads from the authenticated user's Gmail account.\n\nThis tool can filter threads based on a query string and supports pagination. It returns a list of threads, including their IDs and related messages. Each related message contains details like a snippet of the message body, the subject, the sender, the recipients etc. The `view` parameter controls which fields are populated in the related messages. By default (or with `THREAD_VIEW_MINIMAL`), it includes subject and snippet. Use `THREAD_VIEW_METADATA_ONLY` to exclude subject and snippet. Note that the full message bodies are not returned by this tool; use the 'get_thread' tool with a thread ID to fetch the full message body if needed. Threads with excluded criteria may still appear in the results. This occurs because Gmail identifies matching messages first. For example, if you search for -is:starred, Gmail will find an entire thread if it contains at least one unstarred message, even if other emails in that same conversation are starred.\n",
"inputSchema": {
"description": "Request message for SearchThreads RPC.",
"properties": {
"includeTrash": {
"description": "Optional. Include threads from TRASH in the results. Defaults to false.",
"type": "boolean"
},
"pageSize": {
"description": "Optional. The maximum number of threads to return. If unspecified, defaults to 20. The maximum allowed value is 50.",
"format": "int32",
"type": "integer"
},
"pageToken": {
"description": "Optional. Page token to retrieve a specific page of results in the list. Leave empty to fetch the first page. This is primarily used for pagination to continue fetching results from where the previous `SearchThreads` call left off, especially when the number of threads matching the query exceeds the page_size limit.",
"type": "string"
},
"query": {
"description": "Optional. A query string to filter the threads. Natural language queries must be pre-converted into Gmail syntax queries to use this tool. If omitted, all threads (excluding spam and trash by default) are listed. Supported Operators by Category: Sender & Recipient: - `from:` \u2014 Sent from a specific person. - `to:` \u2014 Sent to a specific person. - `cc:` \u2014 Specific people in Cc. - `bcc:` \u2014 Specific people in Bcc. - `deliveredto:` \u2014 Delivered to a specific address. - `list:` \u2014 From a specific mailing list. Time & Date: - `after:YYYY/MM/DD` / `newer:YYYY/MM/DD` \u2014 Received after a date. - `before:YYYY/MM/DD` / `older:YYYY/MM/DD` \u2014 Received before a date. - `older_than:` \u2014 Older than a duration (for example, `1y`, `2d`). - `newer_than:` \u2014 Newer than a duration. Content: - `subject:` \u2014 Words in the subject line. - `has:` \u2014 Has specific content types (attachment, drive, youtube, document). - `filename:` \u2014 Attachment with a specific name or type. - `\"\"` \u2014 Search for an exact word or phrase. (for example, `\"holiday\"`, `\"holiday vacation\"`). - `+` \u2014 Match a word exactly. (for example, `+holiday`, `+unicorn`) - `rfc822msgid:` \u2014 Specific message ID header. - `AROUND ` \u2014 Find words near each other (for example, `holiday AROUND 10 vacation`). Labels & Categories: - `label:` \u2014 Under a specific label. The tool accepts label IDs, not display names. Use the list_labels tool to get the ID. - `category:` \u2014 In a category (primary, social, promotions, updates, forums, reservations, purchases). - `in:` \u2014 Search in specific labels (archive, snoozed, trash, sent, inbox). For example, `in:trash`, `in:inbox`. Archived and sent messages are included by default; use `-in:archive` and `-in:sent` to exclude them. Drafts are explicitly excluded by default by the tool. Use `in:inbox` to restrict search to the inbox only. - `has:userlabels` \u2014 Has any user labels. - `has:nouserlabels` \u2014 Does not have any user labels. - `has:*-star` \u2014 Specific star colors (if enabled, for example, `has:yellow-star`). - `in:draft` \u2014 Search in drafts. -in:draft means exclude drafts from the search results. - `in:sent` \u2014 Search in sent messages. - `in:anywhere` \u2014 Search in all folders (including spam and trash). Status: - `is:` \u2014 Search by status (important, starred, unread, read, muted). Size: - `size:` \u2014 Specific size in bytes. - `larger:` / `smaller:` \u2014 Larger or smaller than a size (for example, `10M` for 10 MB). Logic & Grouping: - `AND` \u2014 Match all criteria (default behavior). - `OR` or `{ }` \u2014 Match one or more criteria (for example, `from:amy OR from:david`, `{from:amy from:david}`). - `-` (minus) \u2014 Exclude criteria (for example, `-movie`). - `( )` \u2014 Group multiple search terms (for example, `subject:(dinner film)`). Examples: - `subject:OneMCP Update` - `from:user@example.com` - `to:user2@example.com AND newer_than:7d` - `project proposal has:attachment` - `is:unread -in:draft`",
"type": "string"
},
"view": {
"description": "Optional. Controls the fields populated for threads in the thread list. Defaults to `THREAD_VIEW_MINIMAL`. `THREAD_VIEW_MINIMAL` returns `id`, `snippet`, `subject`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`. `THREAD_VIEW_METADATA_ONLY` returns `id`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`.",
"enum": [
"THREAD_VIEW_UNSPECIFIED",
"THREAD_VIEW_METADATA_ONLY",
"THREAD_VIEW_MINIMAL"
],
"type": "string",
"x-google-enum-descriptions": [
"Maps to THREAD_VIEW_MINIMAL for backward compatibility.",
"Returns `id`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`.",
"Returns `id`, `snippet`, `subject`, `sender`, `to_recipients`, `cc_recipients`, `bcc_recipients`, `date`, `label_ids`."
]
}
},
"type": "object"
},
"name": "search_threads",
"outputSchema": {
"$defs": {
"AttachmentMetadata": {
"description": "Represents an attachment associated with a message.",
"properties": {
"filename": {
"description": "The filename of the attachment.",
"type": "string"
},
"id": {
"description": "Output only. The ID of the attachment.",
"readOnly": true,
"type": "string"
},
"mimeType": {
"description": "The MIME type of the attachment.",
"type": "string"
}
},
"type": "object"
},
"Message": {
"description": "Message within a thread.",
"properties": {
"attachmentIds": {
"description": "Output only. The attachment ids, only populated if MessageFormat was FULL_CONTENT.",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"attachments": {
"description": "Output only. The attachments, only populated if MessageFormat was FULL_CONTENT.",
"items": {
"$ref": "#/$defs/AttachmentMetadata"
},
"readOnly": true,
"type": "array"
},
"bccRecipients": {
"description": "BCC recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
},
"ccRecipients": {
"description": "CC recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
},
"date": {
"description": "Date of the message in ISO 8601 format (YYYY-MM-DD).",
"type": "string"
},
"htmlBody": {
"description": "The HTML content of the email, only populated if MessageFormat was FULL_CONTENT.",
"type": "string"
},
"id": {
"description": "The unique identifier of the message.",
"type": "string"
},
"labelIds": {
"description": "The ids of the labels attached to the message. Includes ids of user labels and standard system labels limited to `INBOX`, `SPAM`, `TRASH`, `UNREAD`, `STARRED`, `IMPORTANT`, `SENT`, `DRAFT`, `CHAT`.",
"items": {
"type": "string"
},
"type": "array"
},
"plaintextBody": {
"description": "Full body content, only populated if MessageFormat was FULL_CONTENT.",
"type": "string"
},
"sender": {
"description": "Sender email address.",
"type": "string"
},
"snippet": {
"description": "Snippet of the message body.",
"type": "string"
},
"subject": {
"description": "The message subject extracted from headers:",
"type": "string"
},
"toRecipients": {
"description": "To recipient email addresses.",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"Thread": {
"description": "Thread containing a list of messages.",
"properties": {
"id": {
"description": "The unique identifier of the thread.",
"type": "string"
},
"messages": {
"description": "A list of messages in the thread, ordered chronologically.",
"items": {
"$ref": "#/$defs/Message"
},
"type": "array"
}
},
"type": "object"
}
},
"description": "Response message for SearchThreads RPC.",
"properties": {
"nextPageToken": {
"description": "A token that can be used in a subsequent call to retrieve the next page of threads. Present only if there are more results. If the number of threads matching the query exceeds the page_size limit, the response will contain a `next_page_token`. To retrieve the next page of results, pass this token in the `page_token` field of the next `SearchThreadsRequest`.",
"type": "string"
},
"resultCountEstimate": {
"description": "The estimated result count for this query. It should be treated as a lower bound, so for example if it is 500, then the count can be reported to the user as \"500+\".",
"format": "int64",
"type": "string"
},
"threads": {
"description": "List of thread summaries.",
"items": {
"$ref": "#/$defs/Thread"
},
"type": "array"
}
},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Add labels to thread"
},
"description": "Adds labels to an entire thread in the authenticated user's Gmail account. This operation affects all messages currently in the thread and any future messages added to it.\n\nIf unsure of the thread ID, use the `search_threads` tool first.\n\nIf unsure of a user label's ID, use the `list_labels` tool first to discover available labels and their IDs. To add a Trash label or a Spam label to a thread, or move a specific thread to Trash, please use the `apply_sensitive_thread_label` tool instead.\n",
"inputSchema": {
"description": "Request message for LabelThread RPC.",
"properties": {
"labelIds": {
"description": "Required. The unique identifiers of the labels to add. Can be a system label ID (e.g., `INBOX`, `STARRED`, `UNREAD`, `IMPORTANT`) or a user-defined label ID. The tool accepts `label_ids` and not label names. Use the `list_labels` tool to get the corresponding label id to a display name for user-defined labels.",
"items": {
"type": "string"
},
"type": "array"
},
"threadId": {
"description": "Required. The unique identifier of the thread to add labels to.",
"type": "string"
}
},
"required": [
"threadId",
"labelIds"
],
"type": "object"
},
"name": "label_thread",
"outputSchema": {
"description": "Response message for LabelThread RPC.",
"properties": {},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": true,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Remove labels from thread"
},
"description": "Removes labels from an entire thread in the authenticated user's Gmail account. If unsure of the thread ID, use the `search_threads` tool first. If unsure of a user label's ID, use the `list_labels` tool first.",
"inputSchema": {
"description": "Request message for UnlabelThread RPC.",
"properties": {
"labelIds": {
"description": "Required. The unique identifiers of the labels to remove. Can be a system label ID (e.g., `INBOX`, `TRASH`, `SPAM`, `STARRED`, `UNREAD`, `IMPORTANT`) or a user-defined label ID. The tool accepts `label_ids` and not label names. Use the `list_labels` tool to get the corresponding label id to a display name for user-defined labels.",
"items": {
"type": "string"
},
"type": "array"
},
"threadId": {
"description": "Required. The unique identifier of the thread to remove labels from.",
"type": "string"
}
},
"required": [
"threadId",
"labelIds"
],
"type": "object"
},
"name": "unlabel_thread",
"outputSchema": {
"description": "Response message for UnlabelThread RPC.",
"properties": {},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": true,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Apply sensitive label (Trash or Spam) to thread"
},
"description": "Adds a sensitive label (Trash or Spam) to an entire thread in the authenticated user's Gmail account. This operation affects all messages currently in the thread and any future messages added to it.\n\nUse this tool to trash a thread, mark a thread as spam, or move the specified thread to Trash.\n\nTo find the thread ID, use the `search_threads` tool first.\n",
"inputSchema": {
"description": "Request message for ApplySensitiveThreadLabel RPC.",
"properties": {
"labelOption": {
"description": "Required. The sensitive label option to add.",
"enum": [
"LABEL_OPTION_UNSPECIFIED",
"TRASH",
"SPAM"
],
"type": "string",
"x-google-enum-descriptions": [
"Unspecified label option.",
"Trash label.",
"Spam label."
]
},
"threadId": {
"description": "Required. The ID of the thread to add the label to.",
"type": "string"
}
},
"required": [
"threadId",
"labelOption"
],
"type": "object"
},
"name": "apply_sensitive_thread_label",
"outputSchema": {
"description": "Response message for ApplySensitiveThreadLabel RPC.",
"properties": {},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": true,
"title": "List labels"
},
"description": "Lists all labels available in the authenticated user's Gmail account. Use this tool to discover the `id` of a label before calling `label_thread`, `unlabel_thread`, `label_message`, or `unlabel_message`. Note: the system labels, `DRAFT` and `SENT`, cannot be set on messages and are read only.",
"inputSchema": {
"description": "Request message for ListLabels RPC.",
"properties": {},
"type": "object"
},
"name": "list_labels",
"outputSchema": {
"$defs": {
"Label": {
"description": "Details of a label.",
"properties": {
"color": {
"$ref": "#/$defs/LabelColor",
"description": "Optional. The color of the label."
},
"labelId": {
"description": "The unique identifier of the label.",
"type": "string"
},
"messagesTotal": {
"description": "The total number of messages under the label.",
"format": "int32",
"type": "integer"
},
"messagesUnread": {
"description": "The number of unread messages under the label.",
"format": "int32",
"type": "integer"
},
"name": {
"description": "The human-readable display name of the label.",
"type": "string"
},
"threadsTotal": {
"description": "The total number of threads under the label.",
"format": "int32",
"type": "integer"
},
"threadsUnread": {
"description": "The number of unread threads under the label.",
"format": "int32",
"type": "integer"
}
},
"type": "object"
},
"LabelColor": {
"description": "The color of the label.",
"properties": {
"backgroundColor": {
"description": "The background color of the label, represented as a hex string (e.g., \"#ffffff\"). Only the following predefined set of color values are allowed: `#000000`, `#434343`, `#666666`, `#999999`, `#cccccc`, `#efefef`, `#f3f3f3`, `#ffffff`, `#fb4c2f`, `#ffad47`, `#fad165`, `#16a766`, `#43d692`, `#4a86e8`, `#a479e2`, `#f691b3`, `#f6c5be`, `#ffe6c7`, `#fef1d1`, `#b9e4d0`, `#c6f3de`, `#c9daf8`, `#e4d7f5`, `#fcdee8`, `#efa093`, `#ffd6a2`, `#fce8b3`, `#89d3b2`, `#a0eac9`, `#a4c2f4`, `#d0bcf1`, `#fbc8d9`, `#e66550`, `#ffbc6b`, `#fcda83`, `#44b984`, `#68dfa9`, `#6d9eeb`, `#b694e8`, `#f7a7c0`, `#cc3a21`, `#eaa041`, `#f2c960`, `#149e60`, `#3dc789`, `#3c78d8`, `#8e63ce`, `#e07798`, `#ac2b16`, `#cf8933`, `#d5ae49`, `#0b804b`, `#2a9c68`, `#285bac`, `#653e9b`, `#b65775`, `#822111`, `#a46a21`, `#aa8831`, `#076239`, `#1a764d`, `#1c4587`, `#41236d`, `#83334c`, `#464646`, `#e7e7e7`, `#0d3472`, `#b6cff5`, `#0d3b44`, `#98d7e4`, `#3d188e`, `#e3d7ff`, `#711a36`, `#fbd3e0`, `#8a1c0a`, `#f2b2a8`, `#7a2e0b`, `#ffc8af`, `#7a4706`, `#ffdeb5`, `#594c05`, `#fbe983`, `#684e07`, `#fdedc1`, `#0b4f30`, `#b3efd3`, `#04502e`, `#a2dcc1`, `#c2c2c2`, `#4986e7`, `#2da2bb`, `#b99aff`, `#994a64`, `#f691b2`, `#ff7537`, `#ffad46`, `#662e37`, `#ebdbde`, `#cca6ac`, `#094228`, `#42d692`, `#16a765`",
"type": "string"
},
"textColor": {
"description": "The text color of the label, represented as a hex string (e.g., \"#000000\"). Only the following predefined set of color values are allowed: `#000000`, `#434343`, `#666666`, `#999999`, `#cccccc`, `#efefef`, `#f3f3f3`, `#ffffff`, `#fb4c2f`, `#ffad47`, `#fad165`, `#16a766`, `#43d692`, `#4a86e8`, `#a479e2`, `#f691b3`, `#f6c5be`, `#ffe6c7`, `#fef1d1`, `#b9e4d0`, `#c6f3de`, `#c9daf8`, `#e4d7f5`, `#fcdee8`, `#efa093`, `#ffd6a2`, `#fce8b3`, `#89d3b2`, `#a0eac9`, `#a4c2f4`, `#d0bcf1`, `#fbc8d9`, `#e66550`, `#ffbc6b`, `#fcda83`, `#44b984`, `#68dfa9`, `#6d9eeb`, `#b694e8`, `#f7a7c0`, `#cc3a21`, `#eaa041`, `#f2c960`, `#149e60`, `#3dc789`, `#3c78d8`, `#8e63ce`, `#e07798`, `#ac2b16`, `#cf8933`, `#d5ae49`, `#0b804b`, `#2a9c68`, `#285bac`, `#653e9b`, `#b65775`, `#822111`, `#a46a21`, `#aa8831`, `#076239`, `#1a764d`, `#1c4587`, `#41236d`, `#83334c`, `#464646`, `#e7e7e7`, `#0d3472`, `#b6cff5`, `#0d3b44`, `#98d7e4`, `#3d188e`, `#e3d7ff`, `#711a36`, `#fbd3e0`, `#8a1c0a`, `#f2b2a8`, `#7a2e0b`, `#ffc8af`, `#7a4706`, `#ffdeb5`, `#594c05`, `#fbe983`, `#684e07`, `#fdedc1`, `#0b4f30`, `#b3efd3`, `#04502e`, `#a2dcc1`, `#c2c2c2`, `#4986e7`, `#2da2bb`, `#b99aff`, `#994a64`, `#f691b2`, `#ff7537`, `#ffad46`, `#662e37`, `#ebdbde`, `#cca6ac`, `#094228`, `#42d692`, `#16a765`",
"type": "string"
}
},
"type": "object"
}
},
"description": "Response message for ListLabels RPC.",
"properties": {
"labels": {
"description": "List of all labels in the user's account.",
"items": {
"$ref": "#/$defs/Label"
},
"type": "array"
}
},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Add labels to message"
},
"description": "Adds one or more labels to a specific message in the authenticated user's Gmail account.\n\nTo find the message ID, use tools like `search_threads` or `get_thread`. If unsure of a user label's ID, use the `list_labels` tool first to discover available labels and their IDs.\nTo add a Trash label or a Spam label to a message, or move a specific message to Trash, please use the `apply_sensitive_message_label` tool instead.\n",
"inputSchema": {
"description": "Request message for LabelMessage RPC.",
"properties": {
"labelIds": {
"description": "Required. The IDs of the labels to add. Can be a system label ID (e.g., `INBOX`, `STARRED`, `UNREAD`, `IMPORTANT`) or a user-defined label ID. The tool accepts `label_ids` and not label names. Use the `list_labels` tool to get the corresponding label id to a display name for user-defined labels.",
"items": {
"type": "string"
},
"type": "array"
},
"messageId": {
"description": "Required. The ID of the message to add the labels to.",
"type": "string"
}
},
"required": [
"messageId",
"labelIds"
],
"type": "object"
},
"name": "label_message",
"outputSchema": {
"description": "Response message for LabelMessage RPC.",
"properties": {},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": true,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Remove labels from message"
},
"description": "Removes one or more labels from a specific message in the authenticated user's Gmail account. To find the message ID, use tools like `search_threads` or `get_thread`. If unsure of a user label's ID, use the `list_labels` tool first to discover available labels and their IDs.",
"inputSchema": {
"description": "Request message for UnlabelMessage RPC.",
"properties": {
"labelIds": {
"description": "Required. The IDs of the labels to remove. Can be a system label ID (e.g., `INBOX`, `TRASH`, `SPAM`, `STARRED`, `UNREAD`, `IMPORTANT`) or a user-defined label ID. The tool accepts `label_ids` and not label names. Use the `list_labels` tool to get the corresponding label id to a display name for user-defined labels.",
"items": {
"type": "string"
},
"type": "array"
},
"messageId": {
"description": "Required. The ID of the message to remove the labels from.",
"type": "string"
}
},
"required": [
"messageId",
"labelIds"
],
"type": "object"
},
"name": "unlabel_message",
"outputSchema": {
"description": "Response message for UnlabelMessage RPC.",
"properties": {},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": true,
"idempotentHint": true,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Apply sensitive label (Trash or Spam) to message"
},
"description": "Adds a sensitive label (Trash or Spam) to a specific message in the authenticated user's Gmail account.\n\nUse this tool to trash a message, mark a message as spam, or move the specified message to Trash.\n\nTo find the message ID, use tools like `search_threads` or `get_thread`. To find the draft message ID, use tools like `list_drafts`.\n",
"inputSchema": {
"description": "Request message for ApplySensitiveMessageLabel RPC.",
"properties": {
"labelOption": {
"description": "Required. The sensitive label option to add.",
"enum": [
"LABEL_OPTION_UNSPECIFIED",
"TRASH",
"SPAM"
],
"type": "string",
"x-google-enum-descriptions": [
"Unspecified label option.",
"Trash label.",
"Spam label."
]
},
"messageId": {
"description": "Required. The ID of the message to add the label to.",
"type": "string"
}
},
"required": [
"messageId",
"labelOption"
],
"type": "object"
},
"name": "apply_sensitive_message_label",
"outputSchema": {
"description": "Response message for ApplySensitiveMessageLabel RPC.",
"properties": {},
"type": "object"
}
},
{
"annotations": {
"destructiveHint": false,
"idempotentHint": false,
"openWorldHint": false,
"readOnlyHint": false,
"title": "Create label"
},
"description": "Creates a new label in the authenticated user's Gmail account.\nSupports creating nested labels (sub-labels) using a forward slash (e.g., 'Projects/Alpha/Sprint-1').\nBy default, parent labels will be automatically created if they do not exist.\n",
"inputSchema": {
"$defs": {
"LabelColor": {
"description": "The color of the label.",
"properties": {
"backgroundColor": {
"description": "The background color of the label, represented as a hex string (e.g., \"#ffffff\"). Only the following predefined set of color values are allowed: `#000000`, `#434343`, `#666666`, `#999999`, `#cccccc`, `#efefef`, `#f3f3f3`, `#ffffff`, `#fb4c2f`, `#ffad47`, `#fad165`, `#16a766`, `#43d692`, `#4a86e8`, `#a479e2`, `#f691b3`, `#f6c5be`, `#ffe6c7`, `#fef1d1`, `#b9e4d0`, `#c6f3de`, `#c9daf8`, `#e4d7f5`, `#fcdee8`, `#efa093`, `#ffd6a2`, `#fce8b3`, `#89d3b2`, `#a0eac9`, `#a4c2f4`, `#d0bcf1`, `#fbc8d9`, `#e66550`, `#ffbc6b`, `#fcda83`, `#44b984`, `#68dfa9`, `#6d9eeb`, `#b694e8`, `#f7a7c0`, `#cc3a21`, `#eaa041`, `#f2c960`, `#149e60`, `#3dc789`, `#3c78d8`, `#8e63ce`, `#e07798`, `#ac2b16`, `#cf8933`, `#d5ae49`, `#0b804b`, `#2a9c68`, `#285bac`, `#653e9b`, `#b65775`, `#822111`, `#a46a21`, `#aa8831`, `#076239`, `#1a764d`, `#1c4587`, `#41236d`, `#83334c`, `#464646`, `#e7e7e7`, `#0d3472`, `#b6cff5`, `#0d3b44`, `#98d7e4`, `#3d188e`, `#e3d7ff`, `#711a36`, `#fbd3e0`, `#8a1c0a`, `#f2b2a8`, `#7a2e0b`, `#ffc8af`, `#7a4706`, `#ffdeb5`, `#594c05`, `#fbe983`, `#684e07`, `#fdedc1`, `#0b4f30`, `#b3efd3`, `#04502e`, `#a2dcc1`, `#c2c2c2`, `#4986e7`, `#2da2bb`, `#b99aff`, `#994a64`, `#f691b2`, `#ff7537`, `#ffad46`, `#662e37`, `#ebdbde`, `#cca6ac`, `#094228`, `#42d692`, `#16a765`",
"type": "string"
},
"textColor": {
"description": "The text color of the label, represented as a hex string (e.g., \"#000000\"). Only the following predefined set of color values are allowed: `#000000`, `#434343`, `#666666`, `#999999`, `#cccccc`, `#efefef`, `#f3f3f3`, `#ffffff`, `#fb4c2f`, `#ffad47`, `#fad165`, `#16a766`, `#43d692`, `#4a86e8`, `#a479e2`, `#f691b3`, `#f6c5be`, `#ffe6c7`, `#fef1d1`, `#b9e4d0`, `#c6f3de`, `#c9daf8`, `#e4d7f5`, `#fcdee8`, `#efa093`, `#ffd6a2`, `#fce8b3`, `#89d3b2`, `#a0eac9`, `#a4c2f4`, `#d0bcf1`, `#fbc8d9`, `#e66550`, `#ffbc6b`, `#fcda83`, `#44b984`, `#68dfa9`, `#6d9eeb`, `#b694e8`, `#f7a7c0`, `#cc3a21`, `#eaa041`, `#f2c960`, `#149e60`, `#3dc789`, `#3c78d8`, `#8e63ce`, `#e07798`, `#ac2b16`, `#cf8933`, `#d5ae49`, `#0b804b`, `#2a9c68`, `#285bac`, `#653e9b`, `#b65775`, `#822111`, `#a46a21`, `#aa8831`, `#076239`, `#1a764d`, `#1c4587`, `#41236d`, `#83334c`, `#464646`, `#e7e7e7`, `#0d3472`, `#b6cff5`, `#0d3b44`, `#98d7e4`, `#3d188e`, `#e3d7ff`, `#711a36`, `#fbd3e0`, `#8a1c0a`, `#f2b2a8`, `#7a2e0b`, `#ffc8af`, `#7a4706`, `#ffdeb5`, `#594c05`, `#fbe983`, `#684e07`, `#fdedc1`, `#0b4f30`, `#b3efd3`, `#04502e`, `#a2dcc1`, `#c2c2c2`, `#4986e7`, `#2da2bb`, `#b99aff`, `#994a64`, `#f691b2`, `#ff7537`, `#ffad46`, `#662e37`, `#ebdbde`, `#cca6ac`, `#094228`, `#42d692`, `#16a765`",
"type": "string"
}
},
"type": "object"
}
},
"description": "Request message for CreateLabel RPC.",
"properties": {
"autoCreateParentLabels": {
"description": "Optional. Whether to automatically create parent labels for nested labels (separated by '/'). Defaults to true.",
"type": "boolean"
},
"color": {
"$ref": "#/$defs/LabelColor",
"description": "Optional. The color of the label."
},
"displayName": {
"description": "Required. The display name of the label to create.",
"type": "string"
}
},
"required": [
"displayName"
],
"type": "object"
},
"name": "create_label",
"outputSchema": {
"$defs": {
"LabelColor": {
"description": "The color of the label.",
"properties": {
"backgroundColor": {
"description": "The background color of the label, represented as a hex string (e.g., \"#ffffff\"). Only the following predefined set of color values are allowed: `#000000`, `#434343`, `#666666`, `#999999`, `#cccccc`, `#efefef`, `#f3f3f3`, `#ffffff`, `#fb4c2f`, `#ffad47`, `#fad165`, `#16a766`, `#43d692`, `#4a86e8`, `#a479e2`, `#f691b3`, `#f6c5be`, `#ffe6c7`, `#fef1d1`, `#b9e4d0`, `#c6f3de`, `#c9daf8`, `#e4d7f5`, `#fcdee8`, `#efa093`, `#ffd6a2`, `#fce8b3`, `#89d3b2`, `#a0eac9`, `#a4c2f4`, `#d0bcf1`, `#fbc8d9`, `#e66550`, `#ffbc6b`, `#fcda83`, `#44b984`, `#68dfa9`, `#6d9eeb`, `#b694e8`, `#f7a7c0`, `#cc3a21`, `#eaa041`, `#f2c960`, `#149e60`, `#3dc789`, `#3c78d8`, `#8e63ce`, `#e07798`, `#ac2b16`, `#cf8933`, `#d5ae49`, `#0b804b`, `#2a9c68`, `#285bac`, `#653e9b`, `#b65775`, `#822111`, `#a46a21`, `#aa8831`, `#076239`, `#1a764d`, `#1c4587`, `#41236d`, `#83334c`, `#464646`, `#e7e7e7`, `#0d3472`, `#b6cff5`, `#0d3b44`, `#98d7e4`, `#3d188e`, `#e3d7ff`, `#711a36`, `#fbd3e0`, `#8a1c0a`, `#f2b2a8`, `#7a2e0b`, `#ffc8af`, `#7a4706`, `#ffdeb5`, `#594c05`, `#fbe983`, `#684e07`, `#fdedc1`, `#0b4f30`, `#b3efd3`, `#04502e`, `#a2dcc1`, `#c2c2c2`, `#4986e7`, `#2da2bb`, `#b99aff`, `#994a64`, `#f691b2`, `#ff7537`, `#ffad46`, `#662e37`, `#ebdbde`, `#cca6ac`, `#094228`, `#42d692`, `#16a765`",
"type": "string"
},
"textColor": {
"description": "The text color of the label, represented as a hex string (e.g., \"#000000\"). Only the following predefined set of color values are allowed: `#000000`, `#434343`, `#666666`, `#999999`, `#cccccc`, `#efefef`, `#f3f3f3`, `#ffffff`, `#fb4c2f`, `#ffad47`, `#fad165`, `#16a766`, `#43d692`, `#4a86e8`, `#a479e2`, `#f691b3`, `#f6c5be`, `#ffe6c7`, `#fef1d1`, `#b9e4d0`, `#c6f3de`, `#c9daf8`, `#e4d7f5`, `#fcdee8`, `#efa093`, `#ffd6a2`, `#fce8b3`, `#89d3b2`, `#a0eac9`, `#a4c2f4`, `#d0bcf1`, `#fbc8d9`, `#e66550`, `#ffbc6b`, `#fcda83`, `#44b984`, `#68dfa9`, `#6d9eeb`, `#b694e8`, `#f7a7c0`, `#cc3a21`, `#eaa041`, `#f2c960`, `#149e60`, `#3dc789`, `#3c78d8`, `#8e63ce`, `#e07798`, `#ac2b16`, `#cf8933`, `#d5ae49`, `#0b804b`, `#2a9c68`, `#285bac`, `#653e9b`, `#b65775`, `#822111`, `#a46a21`, `#aa8831`, `#076239`, `#1a764d`, `#1c4587`, `#41236d`, `#83334c`, `#464646`, `#e7e7e7`, `#0d3472`, `#b6cff5`, `#0d3b44`, `#98d7e4`, `#3d188e`, `#e3d7ff`, `#711a36`, `#fbd3e0`, `#8a1c0a`, `#f2b2a8`, `#7a2e0b`, `#ffc8af`, `#7a4706`, `#ffdeb5`, `#594c05`, `#fbe983`, `#684e07`, `#fdedc1`, `#0b4f30`, `#b3efd3`, `#04502e`, `#a2dcc1`, `#c2c2c2`, `#4986e7`, `#2da2bb`, `#b99aff`, `#994a64`, `#f691b2`, `#ff7537`, `#ffad46`, `#662e37`, `#ebdbde`, `#cca6ac`, `#094228`, `#42d692`, `#16a765`",
"type": "string"
}
},
"type": "object"
}
},
"description": "Details of a label.",
"properties": {
"color": {
"$ref": "#/$defs/LabelColor",
"description": "Optional. The color of the label."
},
"labelId": {
"description": "The unique identifier of the label.",
"type": "string"
},
"messagesTotal": {
"description": "The total number of messages under the label.",
"format": "int32",
"type": "integer"
},
"messagesUnread": {
"description": "The number of unread messages under the label.",
"format": "int32",
"type": "integer"
},
"name": {
"description": "The human-readable display name of the label.",
"type": "string"
},
"threadsTotal": {
"description": "The total number of threads under the label.",
"format": "int32",
"type": "integer"
},
"threadsUnread": {
"description": "The number of unread threads under the label.",
"format": "int32",
"type": "integer"
}
},
"type": "object"
}
}
]
}
},
"url": "https://gmailmcp.googleapis.com/mcp/v1"
},
"latency_ms": 105.18,
"status": "ok"
},
"transport_compliance_probe": {
"details": {
"bad_protocol_error": null,
"bad_protocol_headers": {
"content-type": "application/json; charset=UTF-8"
},
"bad_protocol_payload": {
"error": {
"code": -32600,
"message": "Unsupported protocol version"
},
"id": 410,
"jsonrpc": "2.0"
},
"bad_protocol_status_code": 400,
"delete_error": null,
"delete_status_code": null,
"expired_session_error": null,
"expired_session_status_code": null,
"issues": [
"missing_session_id",
"missing_protocol_header"
],
"last_event_id_visible": false,
"protocol_header_present": false,
"requested_protocol_version": "2025-03-26",
"session_id_present": false,
"transport": "streamable-http"
},
"latency_ms": 103.1,
"status": "warning"
},
"utility_coverage_probe": {
"details": {
"completions": {
"advertised": false,
"live_probe": "not_executed",
"sample_target": null
},
"initialize_capability_keys": [
"prompts",
"tools"
],
"pagination": {
"metadata_signal": false,
"next_cursor_methods": [],
"supported": false
},
"tasks": {
"advertised": false,
"http_status": 200,
"probe_status": "missing"
}
},
"latency_ms": 117.65,
"status": "missing"
}
},
"failures": {
"oauth_authorization_server": {
"reason": "no_authorization_server"
},
"oauth_protected_resource": {
"error": "Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"url": "https://gmailmcp.googleapis.com/.well-known/oauth-protected-resource"
},
"openid_configuration": {
"reason": "no_authorization_server"
},
"server_card": {
"error": "Client error '404 Not Found' for url 'https://gmailmcp.googleapis.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
"url": "https://gmailmcp.googleapis.com/.well-known/mcp/server-card.json"
}
},
"remote_url": "https://gmailmcp.googleapis.com/mcp/v1",
"server_card_payload": null,
"server_identifier": "daviiiL/gmail-mcp-server-typescript-autogenerated"
}
Known versions
- No versions recorded.
Validation history
7 day score delta
n/a
30 day score delta
n/a
Recent healthy ratio
100%
Freshness
8.3h
| Timestamp | Status | Score | Latency | Tools |
|---|---|---|---|---|
| Aug 10, 2026 05:10:01 AM UTC | Healthy | 56.2 | 1432.9 ms | 13 |
| Aug 09, 2026 04:37:49 PM UTC | Healthy | 33.4 | 1187.0 ms | 0 |
| Aug 09, 2026 04:37:17 AM UTC | Healthy | 31.6 | 1260.7 ms | 0 |
Validation timeline
| Validated | Summary | Score | Protocol | Auth mode | Tools | High-risk tools | Changes |
|---|---|---|---|---|---|---|---|
| Aug 10, 2026 05:10:01 AM UTC | Healthy | 56.2 | 2025-03-26 | public | 13 | 2 | auth_mode_changed write_surface_expanded tool_snapshot_changed |
| Aug 09, 2026 04:37:49 PM UTC | Healthy | 33.4 | unknown | unknown | 0 | 0 | none |
| Aug 09, 2026 04:37:17 AM UTC | Healthy | 31.6 | unknown | unknown | 0 | 0 | none |
Recent validation runs
| Started | Status | Summary | Latency | Checks |
|---|---|---|---|---|
| Aug 10, 2026 05:10:00 AM UTC | Completed | Healthy | 1432.9 ms | action_safety_probe, advanced_capabilities_probe, connector_publishability_probe, connector_replay_probe, determinism_probe, initialize, interactive_flow_probe, oauth_authorization_server, oauth_protected_resource, official_registry_probe, openid_configuration, probe_noise_resilience, prompt_get, prompts_list, protocol_version_probe, provenance_divergence_probe, request_association_probe, resource_read, resources_list, schema_divergence_probe, server_card, session_resume_probe, step_up_auth_probe, tool_snapshot_probe, tools_list, transport_compliance_probe, utility_coverage_probe |
| Aug 09, 2026 04:37:48 PM UTC | Completed | Healthy | 1187.0 ms | |
| Aug 09, 2026 04:37:15 AM UTC | Completed | Healthy | 1260.7 ms | |
Public server reputation
Validation success 7d
1.0
Validation success 30d
1.0
Mean time to recover
n/a
Breaking diffs 30d
1
Registry drift frequency 30d
0
Snapshot changes 30d
1
Incident & change feed
| Timestamp | Event | Details |
|---|---|---|
| Aug 10, 2026 05:10:01 AM UTC | Latest validation: healthy | Score 56.2 with status healthy. |
| Aug 10, 2026 05:10:01 AM UTC | Score changed | Score delta +22.8 versus the previous run. |
| Aug 10, 2026 05:10:01 AM UTC | Tool snapshot changed | Added 13, removed 0, and changed 0 tool contracts. |
| Aug 10, 2026 05:10:01 AM UTC | Auth mode changed | Auth mode moved from unknown to public. |
| Aug 09, 2026 04:37:49 PM UTC | Score changed | Score delta +1.9 versus the previous run. |
Capabilities
- OAuth:
- DCR/CIMD:
- Prompts:
- Homepage: https://glama.ai/mcp/servers/xoz4irih9v
- Docs: none
- Support: https://github.com/daviiiL/gmail-mcp-server-typescript-autogenerated
- Icon: none
- Remote endpoint: https://gmailmcp.googleapis.com/mcp/v1
- Server card: none
Use-case taxonomy
development database search communication
Benchmark tasks
| Benchmark task | Status | Evidence |
|---|---|---|
| Discover tools | Passes |
|
| Read-only fetch flow | Degraded |
|
| OAuth-required connect | Degraded |
|
| Safe write flow with confirmation | Likely to fail |
|
Utility coverage
Probe status
Missing
Completions
not detected
Completion probe target: none
Pagination
not detected
No nextCursor evidence.
Tasks
Missing
Advertised: no
Transport compliance drilldown
Probe status
Warning
Transport
streamable-http
Session header
no
Protocol header
no
Bad protocol response
400
DELETE teardown
n/a
Expired session retry
n/a
Last-Event-ID visible
no
Issues: missing_session_id, missing_protocol_header
Request association
Status
Missing
Advertised capabilities
none
Observed idle methods
none
Violating methods
none
Probe HTTP status
n/a
Issues
none
Connector replay
Status
OK
Backward compatible
Would break after refresh
Added tools
none
Removed tools
none
Additive output changes
none
Required-argument replay breaks
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument replay breaks detected. | ||
Output-schema replay breaks
| Tool | Removed properties | Added properties |
|---|---|---|
| No output-schema replay breaks detected. | ||
Tool snapshot diff & changelog
Snapshot changed
yes
Added tools
apply_sensitive_message_label apply_sensitive_thread_label create_draft create_label get_message get_thread label_message label_thread list_drafts list_labels search_threads unlabel_message unlabel_thread
Removed tools
none
Required-argument changes
| Tool | Added required args | Removed required args |
|---|---|---|
| No required-argument changes detected. | ||
Output-schema drift
| Tool | Previous properties | Latest properties |
|---|---|---|
| No output-schema drift detected. | ||
Validation diff
Score delta
22.81
Summary changed
no
Tool delta
13
Prompt delta
0
Auth mode changed
yes
Write surface expanded
yes
Protocol regressed
no
Registry drift changed
no
Regressed checks: action_safety_probe, oauth_protected_resource, provenance_divergence_probe, server_card
Improved checks: connector_replay_probe, determinism_probe, initialize, probe_noise_resilience, prompts_list, tool_snapshot_probe, tools_list
Newly assessed dimensions: none
No longer assessed dimensions: none
| Component | Previous | Latest | Delta |
|---|---|---|---|
trust_confidence_score | 1.0 | 2.0 | 1.0 |
Registry & provenance divergence
Probe status
Not_Assessed
Direct official match
no
Drift fields
none
| Field | Registry | Live server card |
|---|---|---|
| Title | n/a | n/a |
| Version | n/a | n/a |
| Homepage | n/a | n/a |
Active alerts
- Tool snapshot changed (high)
Tools were added, removed, or materially changed between the latest two validations. - Auth mode changed (high)
Auth mode changed from unknown to public. - Write-action surface expanded (high)
The number of high-risk write, delete, exec, or bulk-access tools increased on the latest run.
Aliases & registry graph
| Identifier | Source | Canonical | Score |
|---|---|---|---|
daviiiL/gmail-mcp-server-typescript-autogenerated |
glama_registry | yes | 56.2 |
Alias consolidation
Canonical identifier
daviiiL/gmail-mcp-server-typescript-autogenerated
Duplicate aliases
0
Registry sources
glama_registry
Remote URLs
Source disagreements
| Field | What differs | Observed values |
|---|---|---|
| No source disagreements detected. | ||
Fix it
Why this score?
Access & Protocol
22/44
Connectivity, auth, and transport expectations for common clients.
Interface Quality
32/56
How well the tool/resource interface communicates and behaves under automation.
Security Posture
17/36
How safely the exposed tool surface handles destructive actions, egress, execution, secrets, and risky inputs.
Reliability & Trust
21/24
Operational stability, consistency, and trustworthiness over time.
Discovery & Governance
11/28
How well the server is documented, listed, and governed in public registries.
Adoption & Market
5/8
Adoption clues and public evidence that the server is intended for external use.
Algorithmic score breakdown
Auth Operability
2/4
Measures whether auth discovery and protected access behave predictably for clients.
Error Contract Quality
0/4
Grades machine-readable error structure, status alignment, and remediation hints.
Rate-Limit Semantics
2/4
Checks whether quota/throttle responses are deterministic and automation-friendly.
Schema Completeness
3/4
Completeness of tool descriptions, parameter docs, examples, and schema shape.
Backward Compatibility
4/4
Stability score across tool schema/name drift relative to prior validations.
SLO Health
4/4
Availability, latency, and burst-failure profile across recent validation history.
Security Hygiene
2/4
HTTPS posture, endpoint hygiene, and response-surface hardening checks.
Task Success
4/4
Can an agent reliably initialize, enumerate tools, and execute core MCP flows?
Trust Confidence
2/4
Confidence-adjusted reliability score that penalizes low evidence volume.
Abuse/Noise Resilience
4/4
How well the server preserves core behavior in the presence of noisy traffic patterns.
Prompt Contract
2/4
Quality of prompt metadata, argument shape, and prompt discoverability for clients.
Resource Contract
0/4
How completely resources and resource templates describe URIs, types, and usage shape.
Discovery Metadata
2/4
Homepage, docs, icon, repository, support, and license coverage for directory consumers.
Registry Consistency
2/4
Agreement between stored registry metadata, live server-card data, and current validation output.
Installability
4/4
How cleanly a real client can connect, initialize, enumerate tools, and proceed through auth.
Session Semantics
4/4
Determinism and state behavior across repeated MCP calls, including sticky-session surprises.
Tool Surface Design
4/4
Naming clarity, schema ergonomics, and parameter complexity across the tool surface.
Result Shape Stability
4/4
Stability of declared output schemas across validations, with penalties for drift or missing shapes.
OAuth Interop
0/4
Depth and client compatibility of OAuth/OIDC metadata beyond the minimal protected-resource check.
Recovery Semantics
0/4
Whether failures include actionable machine-readable next steps such as retry or upgrade guidance.
Maintenance Signal
2/4
Versioning, update recency, and historical validation cadence that indicate active stewardship.
Adoption Signal
2/4
Directory presence and distribution clues that suggest the server is intended for external use.
Freshness Confidence
3/4
Confidence that recent validations are current enough and dense enough to trust operationally.
Transport Fidelity
4/4
Whether declared transport metadata matches the observed endpoint behavior and response formats.
Spec Recency
2/4
How close the server’s claimed MCP protocol version is to the latest known public revision.
Session Resume
3/4
Whether Streamable HTTP session identifiers and resumed requests behave cleanly for real clients.
Step-Up Auth
0/4
Whether OAuth metadata and WWW-Authenticate challenges support granular, incremental consent instead of broad upfront scopes.
Transport Compliance
2/4
Checks session headers, protocol-version enforcement, session teardown, and expired-session behavior.
Utility Coverage
0/4
Signals support for completions, pagination, and task-oriented utility surfaces that larger clients increasingly expect.
Advanced Capability Coverage
1/4
Coverage of newer MCP surfaces like roots, sampling, elicitation, structured output, and related metadata.
Connector Publishability
3/4
How ready the server looks for client catalogs and managed connector programs.
Tool Snapshot Churn
4/4
Stability of the tool surface across recent validations, including add/remove and output-shape drift.
Connector Replay
4/4
Whether a previously published frozen connector snapshot would remain backward compatible after the latest tool refresh.
Request Association
0/4
Whether roots, sampling, and elicitation appear tied to active client requests instead of arriving unsolicited on idle sessions.
Interactive Flow Safety
0/4
Whether prompts and docs steer users toward safe auth flows instead of pasting secrets directly.
Action Safety
1/4
Risk-weighted view of destructive, exec, egress, and confirmation semantics across the tool surface.
Official Registry Presence
3/4
Whether the server appears directly or indirectly in the official MCP registry.
Safety Transparency
2/4
Clarity of docs, auth disclosure, support links, and other trust signals visible to integrators.
Tool Capability Clarity
4/4
How clearly the tool surface communicates whether each action reads, writes, deletes, executes, or exports data.
Destructive Operation Safety
1/4
Penalizes delete/revoke/destroy style tools unless auth and safeguards reduce blast radius.
Egress / SSRF Resilience
3/4
Assesses arbitrary URL fetch, crawl, webhook, and remote-request exposure on the tool surface.
Execution / Sandbox Safety
4/4
Evaluates shell, code, script, and command-execution exposure and whether that surface appears contained.
Data Exfiltration Resilience
1/4
Assesses export, dump, backup, and bulk-read behavior against the surrounding auth and safeguard signals.
Least Privilege Scope
1/4
Rewards scoped auth metadata and penalizes broad or missing scopes around privileged tools.
Secret Handling Hygiene
2/4
Assesses secret-bearing tools, token leakage risk, and whether the public surface avoids obvious secret exposure.
Supply Chain Signal
0/4
Public metadata signal for repository, changelog, license, versioning, and recency that supports supply-chain trust.
Input Sanitization Safety
3/4
Penalizes risky freeform string inputs when schemas do not constrain URLs, code, paths, queries, or templates.
Tool Namespace Clarity
4/4
Measures naming uniqueness and ambiguity across the tool namespace to reduce collision and confusion risk.
Actionable remediation
| Severity | Remediation | Why it matters | Recommended action |
|---|---|---|---|
| High | Add confirmation and dry-run semantics for risky actions | High-risk write, delete, exec, or egress tools should communicate safeguards clearly. | Add an explicit confirm/dry-run parameter or two-step confirmation flow to write, delete, exec, and egress-capable tools before they can make destructive changes.Playbook
|
| High | Align session and protocol behavior with Streamable HTTP expectations | Clients increasingly rely on MCP-Protocol-Version, session teardown, and expired-session semantics. | Align MCP-Protocol-Version, MCP-Session-Id, DELETE teardown, and expired-session handling with the transport spec.Playbook
|
| High | Expose /.well-known/oauth-protected-resource | Without a protected-resource document, OAuth clients cannot discover auth requirements reliably. | Serve /.well-known/oauth-protected-resource and point it at your authorization server metadata.Playbook
|
| High | Publish OAuth authorization-server metadata | Clients need authorization-server metadata to discover issuer, endpoints, and DCR support. | Publish /.well-known/oauth-authorization-server from your issuer and include registration_endpoint when supported.Playbook
|
| High | Publish a complete server card | Missing or incomplete server-card metadata weakens discovery, documentation, and trust signals. | Serve /.well-known/mcp/server-card.json and include tools, prompts/resources, homepage, and support links.Playbook
|
| High | Respond to auth mode changed | Auth mode changed from unknown to public. | Document the new auth posture and confirm protected-resource and challenge metadata still match reality. |
| High | Respond to tool snapshot changed | Tools were added, removed, or materially changed between the latest two validations. | Publish a first-class changelog for tool additions, removals, and breaking schema changes.Playbook
|
| High | Respond to write-action surface expanded | The number of high-risk write, delete, exec, or bulk-access tools increased on the latest run. | Review the newly exposed write and destructive actions before publishing them broadly.Playbook
|
| Medium | Adopt a current MCP protocol revision | Older protocol revisions reduce compatibility with newer clients and registry programs. | Advertise a current MCP protocol revision (2025-06-18 or later) in both the initialize response and the MCP-Protocol-Version header.Playbook
|
| Medium | Close connector-publishing gaps | Connector catalogs care about protocol recency, session behavior, auth clarity, and tool-surface stability. | |
| Medium | Document minimal scopes and return cleaner auth challenges | Modern clients expect granular scopes and step-up auth signals such as WWW-Authenticate scope hints. | Return granular scopes and WWW-Authenticate challenge hints instead of forcing overly broad auth upfront.Playbook
|
| Medium | Publish OpenID configuration | OIDC metadata improves token validation and client compatibility. | Expose /.well-known/openid-configuration with issuer, jwks_uri, and supported grants.Playbook
|
| Medium | Support resumable HTTP sessions cleanly | Modern MCP clients increasingly expect resumable session behavior on streamable HTTP transports. | Persist session state keyed by Mcp-Session-Id and honor Last-Event-ID on GET reconnects so clients can resume a dropped Streamable HTTP session.Playbook
|
| Low | Expose modern utility surfaces like completions, pagination, or tasks | Utility coverage improves interoperability with larger clients and long-lived agent workflows. | Expose completions, pagination, and task metadata where supported so larger clients can plan and resume work safely.Playbook
|
| Low | Publish newer MCP capability signals | Roots, sampling, elicitation, structured outputs, and related metadata improve client understanding and ranking. | Advertise only the advanced capabilities (roots, sampling, elicitation) you have actually implemented end to end in the initialize capabilities object.Playbook
|
| Low | Publish or reconcile the server in the official MCP registry | Official registry presence improves discovery confidence and cross-source consistency. |
Point loss breakdown
| Component | Current | Points missing |
|---|---|---|
| Utility Coverage | 0/4 | -4.0 |
| Step Up Auth | 0/4 | -4.0 |
| Resource Contract | 0/4 | -4.0 |
| Request Association | 0/4 | -4.0 |
| Recovery Semantics | 0/4 | -4.0 |
| OAUTH Interop | 0/4 | -4.0 |
| Interactive Flow Safety | 0/4 | -4.0 |
| Error Contract | 0/4 | -4.0 |
| Dependency Supply Chain Signal | 0/4 | -4.0 |
| Least Privilege Scope | 1/4 | -3.0 |
| Destructive Operation Safety | 1/4 | -3.0 |
| Data Exfiltration Resilience | 1/4 | -3.0 |
Compatibility profiles
OpenAI Connectors
66.7
partial
OpenAI connectors expect OAuth for remote server auth.; Dynamic client registration materially improves connector setup.; OAuth interoperability should be strong.
Connector URL: https://gmailmcp.googleapis.com/mcp/v1 # No OAuth metadata detected. # Server: daviiiL/gmail-mcp-server-typescript-autogenerated
Claude Desktop
100.0
compatible
No major blockers detected.
{
"mcpServers": {
"gmail-mcp-server-typescript-autogenerated": {
"command": "npx",
"args": ["mcp-remote", "https://gmailmcp.googleapis.com/mcp/v1"]
}
}
}
Smithery
80.0
compatible
Machine-readable failure semantics should be present.
smithery mcp add "https://gmailmcp.googleapis.com/mcp/v1"
Generic Streamable HTTP
100.0
compatible
No major blockers detected.
curl -sS https://gmailmcp.googleapis.com/mcp/v1 -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Governance
MCP TrustOps
TrustOps turns this report into operational controls: freshness SLAs, authenticated validation, semantic benchmarks, policy exports, alert subscriptions, badges, cost/compliance metadata, and runtime routing. Fresh trusted index decisions stay separate from long-tail inventory so stale scores do not masquerade as current evidence.
Evidence age tier
Verified in last 24h
Policy SLA (contractual, distinct from the public 24h freshness window): 168.0h • confidence-weighted score (display score discounted for evidence age and confidence -- an internal TrustOps input, not the public score): 44.3 • evidence too old to display:
Policy exports
Formats: json, rego, yaml, github_action, gateway_config, client_report
Runtime routing
/v1/decideReturns allowed tools, blocked tools, approval requirement, and reason.
Hosted runtime
Deploy trusted servers from GitHub with secrets, egress controls, releases, rollback, and audit events.
Authenticated validation
Premium publisher feature: paid authenticated runs verify scopes, write-action safeguards, and authorized tool execution.
Active trust badges
none
Semantic benchmarks
available
Templates cover GitHub, database, healthcare, web search, and CRM least-privilege jobs.
Supply chain
metadata signal
Deep scan checks are marked separately from public metadata signals.
Compliance metadata
Terms, privacy, SOC 2, HIPAA, GDPR, retention, deletion, and audit-log fields are tracked as enterprise metadata.
Alert subscription types
Status changes Score drops or recovers Freshness SLA breach Validation schema drift OAuth or auth behavior changes Tool surface changes New or changed write tool Supply-chain signal changes Legal or compliance metadata changes
MCP Runtime hosting
Verify Hosted MCP turns a trusted server report into a managed remote MCP endpoint with GitHub deployment provenance, sandbox policy, encrypted secrets, release history, rollback, and audit/usage events.
Activation readiness
Trusted hosted runtimes require fresh validation, a passing server state, a remote endpoint, and a minimum score.
Minimum tier
TrustOps
Publisher claim plus paid TrustOps tier are required before secrets or releases can be created.
Hosted endpoint
/hosted/{namespace}/{name}/mcpThe endpoint enforces egress allowlists and records audit/usage events.
Blockers
score_below_hosting_threshold blocked_by_active_alerts blocked_by_production_readiness unsafe_write_action_surface
| Deployment | Status | Endpoint | Release |
|---|---|---|---|
| No hosted runtime deployments yet. | |||
Authenticated validation sessions
Public validation is free. Authenticated validation is paid and proves scoped behavior, write-action safeguards, and authenticated tool execution.
Latest profile
remote_mcp
Authenticated session used
Public score isolation
Preview endpoint
/v1/verifyCI preview endpoint
/v1/ci/previewInstall snippets
Openai Connectors
Connector URL: https://gmailmcp.googleapis.com/mcp/v1 # No OAuth metadata detected. # Server: daviiiL/gmail-mcp-server-typescript-autogenerated
Claude Desktop
{
"mcpServers": {
"gmail-mcp-server-typescript-autogenerated": {
"command": "npx",
"args": ["mcp-remote", "https://gmailmcp.googleapis.com/mcp/v1"]
}
}
}
Smithery
smithery mcp add "https://gmailmcp.googleapis.com/mcp/v1"
Generic Http
curl -sS https://gmailmcp.googleapis.com/mcp/v1 -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"mcp-verify","version":"0.1.0"}}}'
Agent access & tool surface
Live server tools
create_draft list_drafts get_thread get_message search_threads label_thread unlabel_thread apply_sensitive_thread_label
Showing 8 of 13 tools.
Observed from the latest live validation against https://gmailmcp.googleapis.com/mcp/v1. This is the target server surface, not Verify's own inspection tools.
Live capability counts
13 tools • 0 prompts • 0 resources
Counts come from the latest
tools/list, prompts/list, and resources/list checks.Inspect with Verify
search fetch search_servers recommend_servers get_server_report compare_servers
Use Verify itself to search, recommend, compare, and fetch the full report for
daviiiL/gmail-mcp-server-typescript-autogenerated.Direct machine links