gmail-mcp-server

The server explicitly prioritizes security by avoiding unnecessary third-party AI dependencies and implementing intelligent token management with auto-refresh and comprehensive error handling for OAuth. A detailed `SECURITY.md` outlines best practices and vulnerability reporting. However, the `send_email`, `draft_email`, and `download_attachment` tools handle file paths provided as arguments without extensive server-side sanitization against directory traversal beyond checking `fs.existsSync`. While the `SECURITY.md` advises path validation for developers, it's not fully implemented within the provided source for attachment handling, assuming input from the AI model or user is trusted. Credentials are stored in plaintext with restricted file permissions.