MCP Google Workspace
UnverifiedREPO199-mcp/mcp-google
F
Catalogue entry updated 20 days ago
Auth postureNot probedno remote endpoint probed yet
Tools264 Destructive · 12 Write · 10 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 4Write 12Read 10
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Change history
No change history on record for this server.
Recommended policy
delete-contactdeny
batch-update-emailsrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →