gmail-mcp-server

The server uses standard OAuth2 for Gmail authentication and stores credentials securely in the user's home directory. File system operations for attachments (reading files for sending, writing files for downloading) are performed locally. While the server itself does not contain obvious 'eval' or malicious code patterns, a potential risk exists with the attachment feature if a malicious AI prompt were to instruct the server to access or exfiltrate arbitrary files from the local filesystem. This risk is inherent to tools that provide file system access to an AI; the server's implementation handles paths and file existence checks, but robust sandboxing or strict AI prompt filtering would be necessary in a high-security deployment.