gmcp

The server uses standard OAuth2 authentication for Google APIs, loading credentials and tokens from user-specified file paths (`GMAIL_CREDENTIALS_PATH`, `GMAIL_TOKEN_PATH`). This design requires the user to securely manage these files and choose appropriate Gmail API scopes. Crucially, the `send_email` and `reply` tools include a `confirm: false` default, requiring explicit user confirmation to send emails, which significantly enhances safety against accidental or malicious sends. No `eval` or obvious malicious patterns were found in the source code. The `get_attachment` tool returns base64url encoded data, which must be handled securely by the client application.