Gmail (waleedyousaf07) MCP Server

@waleedyousaf07/mcp-gmail npm v0.1.4

Published by @waleedyousaf07 — no publish provenance and no vendor-owned scope, so the publisher could not be verified. The repository link below is self-declared.

View on npm ↗ Raw report (JSON) ↗

Trust grade

98/100

Last scanned 2026-07-22

Trust

A · 98/100

How safe the published surface and source look. Deterministic; every point is auditable.

Capability

Minimal

Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.

Coverage

Metadata

How much the scan could actually inspect. Shallow coverage is stated, never hidden.

A Why this grade 100 − 2.1 = 98/100

Every server starts at 100. These are the exact deductions the deterministic engine applied — each one reproducible, none of it an opinion or an LLM's guess:

Points	What was found	Category
−2.1	Package has no source repository MTC-SUP-011	supply-chain

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind the deduction.

Findings 1

low Package has no source repositoryMTC-SUP-011

"@waleedyousaf07/mcp-gmail" declares no repository URL, so its published artifact cannot be compared against reviewable source.

Fix: Prefer packages that link to public, reviewable source.

Location: package @waleedyousaf07/mcp-gmail

What this scan could not see

No tools were enumerated, so prompt-injection, capability and toxic-flow analysis had no tool surface to inspect. To grade a package’s real runtime tools, scan the running server: --command "npx -y <package>".
The implementation source was not read — this reflects registry metadata only. Add --online to fetch and analyze the published package source.

Versions

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

Version	Score	Findings	Engine	Scanned
`v0.1.4` latest	A 98/100	1	1.5.0	2026-07-22

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

Markdown (GitHub README)

[![MCP Trust Score](https://mcptrustchecker.com/registry/waleedyousaf07-mcp-gmail/badge.svg)](https://mcptrustchecker.com/registry/waleedyousaf07-mcp-gmail)

HTML

<a href="https://mcptrustchecker.com/registry/waleedyousaf07-mcp-gmail"><img src="https://mcptrustchecker.com/registry/waleedyousaf07-mcp-gmail/badge.svg" alt="MCP Trust Score" height="20"></a>

Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/waleedyousaf07-mcp-gmail/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan @waleedyousaf07/mcp-gmail --online

Use the free API → How scoring works

Other implementations of Gmail 24

Independent packages implementing the same tool, scanned with the same engine. Compare all 25 side by side →

Gmail (shinzolabs) Source verified npm

@shinzolabs/gmail-mcp

Security scan results for the Gmail (shinzolabs) MCP server.

Developer Tools Score 100/100 0 findings 1.4k/wk Cap. Minimal

Gmail (klodr) Source verified npm

@klodr/gmail-mcp

Security scan results for the Gmail (klodr) MCP server.

Communication & Collaboration Score 100/100 0 findings 172/wk Cap. Minimal

Gmail (d-mato) Source verified npm

@d-mato/gmail-mcp

Security scan results for the Gmail (d-mato) MCP server.

Communication & Collaboration Score 100/100 0 findings 35/wk Cap. Minimal

Gmail (artymclabin) npm

@artymclabin/gmail-mcp

Security scan results for the Gmail (artymclabin) MCP server.

Communication & Collaboration Score 100/100 0 findings 252/wk Cap. Minimal

Gmail (dev-hitesh-gupta) npm

@dev-hitesh-gupta/gmail-mcp-server

Security scan results for the Gmail (dev-hitesh-gupta) MCP server.

Communication & Collaboration Score 100/100 0 findings 210/wk Cap. Minimal

Gmail (domdomegg) npm

gmail-mcp

Security scan results for the Gmail (domdomegg) MCP server.

Communication & Collaboration Score 100/100 1 finding 159/wk Cap. Moderate

More in Communication & Collaboration

Agent Recall npm

agent-recall-mcp

Security scan results for the Agent Recall MCP server.

Communication & Collaboration Score 100/100 0 findings 470/wk Cap. Minimal

Agentcanary Source verified npm

agentcanary-mcp

Security scan results for the Agentcanary MCP server.

Communication & Collaboration Score 100/100 0 findings 78/wk Cap. Minimal

Agy Discord Source verified npm

agy-discord-mcp

Security scan results for the Agy Discord MCP server.

Communication & Collaboration Score 100/100 1 finding 41/wk Cap. High

Ai Checker npm

@jayofemi/ai-checker

Security scan results for the Ai Checker MCP server.

Communication & Collaboration Score 100/100 0 findings Cap. Minimal

Any Chat Completions npm

@pyroprompts/any-chat-completions-mcp

Security scan results for the Any Chat Completions MCP server.

Communication & Collaboration Score 100/100 1 finding Cap. High

Arko npm

arko-mcp

Security scan results for the Arko MCP server.

Communication & Collaboration Score 100/100 3 findings 204/wk Cap. High