Google Multi MCP Server
mcp-google-multi
npm
v5.4.0
Source verified
Published by bakissation — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 182
Each tool and what it can reach — statically extracted from the published source.
drive_downloadingests untrusted inputdrive_listreads sensitive datagmail_download_attachmentingests untrusted inputmeet_recordings_listingests untrusted inputsearchconsole_url_inspectingests untrusted inputadmin_group_members_listno sensitive capabilityadmin_groups_listno sensitive capabilityadmin_users_getno sensitive capabilityadmin_users_listno sensitive capabilityadmin_users_updateno sensitive capability
Show 172 more tools ↓
calendar_create_calendarno sensitive capabilitycalendar_create_eventno sensitive capabilitycalendar_delete_eventno sensitive capabilitycalendar_get_eventno sensitive capabilitycalendar_get_freebusyno sensitive capabilitycalendar_list_calendarsno sensitive capabilitycalendar_list_eventsno sensitive capabilitycalendar_list_instancesno sensitive capabilitycalendar_move_eventno sensitive capabilitycalendar_quick_addno sensitive capabilitycalendar_update_eventno sensitive capabilitychat_messages_createno sensitive capabilitychat_messages_listno sensitive capabilitychat_spaces_getno sensitive capabilitychat_spaces_listno sensitive capabilitycontacts_createno sensitive capabilitycontacts_deleteno sensitive capabilitycontacts_getno sensitive capabilitycontacts_group_createno sensitive capabilitycontacts_group_membersno sensitive capabilitycontacts_groups_listno sensitive capabilitycontacts_listno sensitive capabilitycontacts_searchno sensitive capabilitycontacts_updateno sensitive capabilitydocs_add_tabno sensitive capabilitydocs_batch_updateno sensitive capabilitydocs_createno sensitive capabilitydocs_create_footerno sensitive capabilitydocs_create_headerno sensitive capabilitydocs_create_named_rangeno sensitive capabilitydocs_create_paragraph_bulletsno sensitive capabilitydocs_delete_footerno sensitive capabilitydocs_delete_headerno sensitive capabilitydocs_delete_named_rangeno sensitive capabilitydocs_delete_paragraph_bulletsno sensitive capabilitydocs_delete_rangeno sensitive capabilitydocs_delete_tabno sensitive capabilitydocs_getno sensitive capabilitydocs_insert_inline_imageno sensitive capabilitydocs_insert_page_breakno sensitive capabilitydocs_insert_section_breakno sensitive capabilitydocs_insert_tableno sensitive capabilitydocs_insert_textno sensitive capabilitydocs_modify_tableno sensitive capabilitydocs_readno sensitive capabilitydocs_replace_named_range_contentno sensitive capabilitydocs_replace_textno sensitive capabilitydocs_update_document_styleno sensitive capabilitydocs_update_paragraph_styleno sensitive capabilitydocs_update_styleno sensitive capabilitydocs_update_tab_propertiesno sensitive capabilitydrive_access_proposal_listno sensitive capabilitydrive_access_proposal_resolveno sensitive capabilitydrive_comment_createno sensitive capabilitydrive_comment_deleteno sensitive capabilitydrive_comment_getno sensitive capabilitydrive_comment_listno sensitive capabilitydrive_comment_updateno sensitive capabilitydrive_copyno sensitive capabilitydrive_create_folderno sensitive capabilitydrive_deleteno sensitive capabilitydrive_empty_trashno sensitive capabilitydrive_exportno sensitive capabilitydrive_get_aboutno sensitive capabilitydrive_list_permissionsno sensitive capabilitydrive_moveno sensitive capabilitydrive_permission_updateno sensitive capabilitydrive_readno sensitive capabilitydrive_remove_permissionno sensitive capabilitydrive_reply_createno sensitive capabilitydrive_reply_deleteno sensitive capabilitydrive_reply_listno sensitive capabilitydrive_reply_updateno sensitive capabilitydrive_revision_deleteno sensitive capabilitydrive_revision_listno sensitive capabilitydrive_revision_updateno sensitive capabilitydrive_searchno sensitive capabilitydrive_shareno sensitive capabilitydrive_shared_drive_getno sensitive capabilitydrive_shared_drives_listno sensitive capabilitydrive_transferno sensitive capabilitydrive_trashno sensitive capabilitydrive_untrashno sensitive capabilitydrive_updateno sensitive capabilitydrive_uploadno sensitive capabilityforms_batch_updateno sensitive capabilityforms_createno sensitive capabilityforms_getno sensitive capabilityforms_response_getno sensitive capabilityforms_responses_listno sensitive capabilityforms_set_publish_settingsno sensitive capabilityforms_watches_listno sensitive capabilitygmail_batch_deleteno sensitive capabilitygmail_batch_modifyno sensitive capabilitygmail_create_draftno sensitive capabilitygmail_create_labelno sensitive capabilitygmail_deleteno sensitive capabilitygmail_delete_labelno sensitive capabilitygmail_get_draftno sensitive capabilitygmail_get_profileno sensitive capabilitygmail_get_vacationno sensitive capabilitygmail_list_draftsno sensitive capabilitygmail_list_historyno sensitive capabilitygmail_list_labelsno sensitive capabilitygmail_modify_labelsno sensitive capabilitygmail_readno sensitive capabilitygmail_read_threadno sensitive capabilitygmail_searchno sensitive capabilitygmail_sendno sensitive capabilitygmail_send_draftno sensitive capabilitygmail_set_vacationno sensitive capabilitygmail_trashno sensitive capabilitymeet_conference_record_getno sensitive capabilitymeet_conference_records_listno sensitive capabilitymeet_transcript_entries_listno sensitive capabilitymeet_transcripts_listno sensitive capabilityreports_activities_listno sensitive capabilitysearchconsole_searchanalytics_queryno sensitive capabilitysearchconsole_sitemaps_deleteno sensitive capabilitysearchconsole_sitemaps_getno sensitive capabilitysearchconsole_sitemaps_listno sensitive capabilitysearchconsole_sitemaps_submitno sensitive capabilitysearchconsole_sites_addno sensitive capabilitysearchconsole_sites_deleteno sensitive capabilitysearchconsole_sites_getno sensitive capabilitysearchconsole_sites_listno sensitive capabilitysheets_add_conditional_format_ruleno sensitive capabilitysheets_add_named_rangeno sensitive capabilitysheets_add_sheetno sensitive capabilitysheets_append_rowsno sensitive capabilitysheets_auto_resize_dimensionsno sensitive capabilitysheets_batch_clearno sensitive capabilitysheets_batch_readno sensitive capabilitysheets_batch_updateno sensitive capabilitysheets_batch_writeno sensitive capabilitysheets_clear_basic_filterno sensitive capabilitysheets_clear_rangeno sensitive capabilitysheets_createno sensitive capabilitysheets_delete_dimensionno sensitive capabilitysheets_delete_named_rangeno sensitive capabilitysheets_delete_sheetno sensitive capabilitysheets_duplicate_sheetno sensitive capabilitysheets_find_replaceno sensitive capabilitysheets_format_cellsno sensitive capabilitysheets_getno sensitive capabilitysheets_insert_dimensionno sensitive capabilitysheets_merge_cellsno sensitive capabilitysheets_read_rangeno sensitive capabilitysheets_set_basic_filterno sensitive capabilitysheets_set_data_validationno sensitive capabilitysheets_sort_rangeno sensitive capabilitysheets_unmerge_cellsno sensitive capabilitysheets_update_bordersno sensitive capabilitysheets_update_sheet_propertiesno sensitive capabilitysheets_write_rangeno sensitive capabilityslides_batch_updateno sensitive capabilityslides_createno sensitive capabilityslides_getno sensitive capabilityslides_page_getno sensitive capabilityslides_page_thumbnailno sensitive capabilitytasks_clearno sensitive capabilitytasks_deleteno sensitive capabilitytasks_getno sensitive capabilitytasks_insertno sensitive capabilitytasks_listno sensitive capabilitytasks_list_deleteno sensitive capabilitytasks_list_getno sensitive capabilitytasks_list_insertno sensitive capabilitytasks_list_updateno sensitive capabilitytasks_lists_listno sensitive capabilitytasks_moveno sensitive capabilitytasks_updateno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (182 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 5
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v5.4.0 latest |
A 97/100 | 0 | 1.13.0 | 2026-09-05 |
v5.3.0 |
A 97/100 | 0 | 1.12.1 | 2026-08-09 |
v5.2.2 |
A 97/100 | 0 | 1.12.1 | 2026-08-03 |
v5.2.1 |
A 97/100 | 0 | 1.12.1 | 2026-07-27 |
v5.1.2 |
A 97/100 | 0 | 1.9.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mcp-google-multi --onlineMore in Security & Testing
The Stripe Agent Toolkit enables popular agent frameworks including LangChain and Vercel's AI SDK to integrate with Stripe APIs through function calling.
MCP (Model Context Protocol) server for AgentGate. Enables Claude and other MCP-compatible AI assistants to request approvals.
Scan any website for AI agent readiness, payment protocols, and discovery endpoints
MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.