email-mcp-server

The system uses standard OAuth 2.0 for Gmail authentication. Sensitive credentials and tokens are loaded from environment variables (`GMAIL_CREDENTIALS`, `GMAIL_TOKEN`), which is better than hardcoding but requires the user to securely store these full JSON strings in their environment. The `gmail.modify` OAuth scope requested in `gmail_auth.py` grants extensive control over the user's Gmail account (read, send, modify messages, and manage labels), which is a powerful permission. No 'eval' or obvious malicious patterns were found in the provided code. The hardcoded local paths for the Python executable and `server.py` within `main.py`'s MCP client configuration would need user modification, which is a minor usability concern but not a direct security flaw.