// SCAN REPORT

Mcp Gmail

106 tools. 68 can modify or destroy data without limits.

10 destructive tools with no built-in limits. Policy required.

Last updated: 1 Jul 2026

68 can modify or destroy data

38 read-only

106 tools total

Community server · catalogue entry verified 01/07/2026

How to control Mcp Gmail ↓

TOOL MAP

What Mcp Gmail exposes to your agents

Read (38) Write / Execute (55) Destructive / Financial (10)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Mcp Gmail tools

Destructive · High delete_milestone The delete_milestone tool irreversibly removes a milestone from a GitHub repository. Destructive · High gmail_batch_delete Deletion of emails is irreversible and cannot be undone. Destructive · High gmail_delete_email Deletion of emails is irreversible and represents permanent data loss. Destructive · High gmail_delete_label Deleting a label in Gmail permanently removes organizational metadata and may cause loss of message categorization.

68 of Mcp Gmail's 106 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mcp Gmail

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Gmail, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_milestone": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_issue_comment": {
    "limits": [
      {
        "counter": "add_issue_comment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "fal-get-model-schema": {
    "limits": [
      {
        "counter": "fal-get-model-schema_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mcp Gmail — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP GMAIL →

Instant setup, no code required.

FULL CATALOGUE

All 106 Mcp Gmail tools

DESTRUCTIVE 10 tools

Destructive delete_milestone Delete a milestone from a GitHub repository Destructive gmail_batch_delete gmail_batch_delete Destructive gmail_batch_move_to_trash gmail_batch_move_to_trash Destructive gmail_delete_email gmail_delete_email Destructive gmail_delete_label gmail_delete_label Destructive gmail_move_to_trash gmail_move_to_trash Destructive slack_archive_channel slack_archive_channel Destructive slack_delete_file slack_delete_file Destructive slack_delete_message slack_delete_message Destructive vercel-blob-delete Delete one or more blobs from Vercel Blob storage using their URLs.

EXECUTE 6 tools

Execute fal-cancel Cancel a the given request Execute fal-enqueue Enqueue a model. The model is enqueued using the fal.run endpoint. You need to check the status of the model u Execute fal-run-sync Run a model synchronously and automatically download any image URLs in the response. The model is run synchron Execute generate_diagram Generates an Entity Relationship Diagram (ERD) or other diagram types using Eraser API Execute merge_pull_request Merge a pull request Execute postgres-execute-query postgres-execute-query

WRITE 49 tools

Write add_issue_comment Add a comment to an existing issue Write add_project_item Add an issue or pull request to a GitHub project Write add_project_item_with_column Add an issue or pull request to a GitHub project and place it in a specific column Write create_issue Create a new issue in a GitHub repository Write create_milestone Create a new milestone in a GitHub repository Write create_project Create a new GitHub project board Write create_pull_request Create a new pull request in a GitHub repository Write create_pull_request_review Create a review for a pull request Write create_pull_request_review_comment Create a review comment for a pull request Write generate-image Generate an image from a prompt Write gmail_archive_email gmail_archive_email Write gmail_batch_archive gmail_batch_archive Write gmail_batch_mark_as_read gmail_batch_mark_as_read Write gmail_batch_mark_as_unread gmail_batch_mark_as_unread Write gmail_batch_modify gmail_batch_modify Write gmail_create_label gmail_create_label Write gmail_draft_email gmail_draft_email Write gmail_mark_as_read gmail_mark_as_read Write gmail_mark_as_unread gmail_mark_as_unread Write gmail_modify_email gmail_modify_email Write gmail_recover_from_trash gmail_recover_from_trash Write gmail_send_email gmail_send_email Write gmail_set_vacation_responder gmail_set_vacation_responder Write gmail_update_forwarding gmail_update_forwarding Write gmail_update_label gmail_update_label Write postgres-batch-insert-data postgres-batch-insert-data Write postgres-insert-data postgres-insert-data Write remove_requested_reviewers Remove requested reviewers from a pull request Write request_reviewers Request reviewers for a pull request Write slack_add_reaction slack_add_reaction Write slack_create_channel slack_create_channel Write slack_disable_public_url slack_disable_public_url Write slack_enable_public_url slack_enable_public_url Write slack_invite_to_channel slack_invite_to_channel Write slack_post_message slack_post_message Write slack_reply_to_thread slack_reply_to_thread Write slack_share_file slack_share_file Write slack_unarchive_channel slack_unarchive_channel Write slack_update_message slack_update_message Write slack_upload_file slack_upload_file Write slack_upload_file_content slack_upload_file_content Write update_issue Update an existing issue in a GitHub repository Write update_milestone Update an existing milestone in a GitHub repository Write update_project_item Move an item between columns in a GitHub project Write update_pull_request Update an existing pull request in a GitHub repository Write update_pull_request_branch Update a pull request branch with the latest upstream changes Write vercel-blob-copy Copy a blob to a new location within Vercel Blob storage. Write vercel-blob-put Upload a file or data to Vercel Blob storage. Returns the blob URL and metadata. Write vercel-blob-put-file Upload a file to Vercel Blob storage by providing the full file path. The file will be read, converted to base

READ 38 tools

Read fal-get-model-schema Get the schema for a model. The model schema is used to understand the input and output of the model. use the Read fal-get-result Get the result of a model execution and automatically download any image URLs in the response. Returns the mod Read fal-get-status Get the status of a model. The status is returned using the fal.run endpoint. You need to check the status of Read fal-list-models List all available models from fal.ai with optional pagination parameters. Avoid listing all models at once a Read fal-search-models Search for models by keywords with optional category and limit filtering. The keywords are used to search for Read generateImplementationPlan Generates a detailed implementation plan based on code context and custom instructions Read get_issue Get details of a specific issue in a GitHub repository. Read get_milestone Get details of a specific milestone in a GitHub repository Read get_project_columns Get columns (status options) available in a GitHub project Read get_project_fields Get all fields available in a GitHub project Read get_pull_request Get details of a specific pull request in a GitHub repository Read gmail_get_forwarding gmail_get_forwarding Read gmail_get_vacation_responder gmail_get_vacation_responder Read gmail_list_email_labels gmail_list_email_labels Read gmail_list_emails gmail_list_emails Read gmail_list_emails_with_advanced_filters gmail_list_emails_with_advanced_filters Read gmail_read_email gmail_read_email Read is_pull_request_merged Check if a pull request has been merged Read list_issues List issues in a GitHub repository with filtering options Read list_milestones List milestones in a GitHub repository with filtering options Read list_project_items List items in a GitHub project Read list_projects List GitHub projects for an organization or user Read list_pull_request_review_comments List review comments for a pull request Read list_pull_request_reviews List reviews for a pull request Read list_pull_requests List pull requests in a GitHub repository with filtering options Read postgres-get-schema postgres-get-schema Read postgres-get-table-details postgres-get-table-details Read postgres-list-tables postgres-list-tables Read slack_get_channel_history slack_get_channel_history Read slack_get_channel_info slack_get_channel_info Read slack_get_file_info slack_get_file_info Read slack_get_thread_replies slack_get_thread_replies Read slack_get_user_profile slack_get_user_profile Read slack_get_users slack_get_users Read slack_list_channels slack_list_channels Read slack_list_files slack_list_files Read vercel-blob-head Get metadata for a blob without downloading its content. Read vercel-blob-list List blobs in Vercel Blob storage with optional filtering and pagination.

OTHER 3 tools

Other generate-documentation generate-documentation Other slack_post_rich_message slack_post_rich_message Other slack_schedule_message slack_schedule_message

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mcp Gmail

Can an AI agent delete data through the Mcp Gmail MCP server? +

Yes. The Mcp Gmail server exposes 10 destructive tools including delete_milestone, gmail_batch_delete, gmail_batch_move_to_trash. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Mcp Gmail? +

The Mcp Gmail server has 49 write tools including add_issue_comment, add_project_item, add_project_item_with_column. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Gmail.

How many tools does the Mcp Gmail MCP server expose? +

106 tools across 4 categories: Destructive, Execute, Read, Write. 38 are read-only. 68 can modify, create, or delete data.

How do I enforce a policy on Mcp Gmail? +

Register the Mcp Gmail MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mcp Gmail tool call.

Deterministic rules across all 106 Mcp Gmail tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP GMAIL →

Instant setup, no code required.

106 Mcp Gmail tools catalogued and risk-classified — across an index of 43,000+ MCP servers.