gas_mcp

The server includes an `exec` tool that uses `eval` to execute arbitrary JavaScript on the Google Apps Script runtime. While this is an intentional feature for dynamic code execution and is documented, it grants significant power and introduces a risk if malicious commands are provided by an external agent (e.g., an LLM). OAuth scopes requested are broad, giving extensive control over user's Google account and resources. However, path traversal is actively mitigated, robust authentication (PKCE, auto-refresh, revocation) is implemented, and rate limiting protects against API abuse.