google-tag-manager-mcp-server

The server demonstrates strong security practices for its stated purpose. It utilizes a robust OAuth provider (@cloudflare/workers-oauth-provider) for Google authentication, with critical secrets (client IDs, secrets, encryption keys) properly sourced from environment variables. Input validation is enforced using Zod schemas, mitigating malformed requests. Explicit mechanisms for session revocation and Google token deauthorization are in place. Furthermore, the Privacy Policy explicitly states compliance with Google's Limited Use requirements, including a clear prohibition against using Google API data for AI/ML model training or improvement. The use of query parameters for sensitive data in the `/remove` endpoint, while functional on a secure Cloudflare Worker, is a minor consideration, but overall, the security posture is high.