/ 100

10 days ago

glama

gwmcp

Item: gwmcp
Rating: 0
Author: M8ven

Google Workspace MCP Server with guided setup and seamless auth. Enables using 114 Google Workspace tools with Claude Code, Cursor, or any MCP client through natural language.

→ Gambinoo3005/gwmcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: .credentials, credentials, .credentials

🔐

You'll be asked for 3 credentials: GOOGLE_OAUTH_CLIENT_SECRET, FASTMCP_SERVER_AUTH_GOOGLE_JWT_SIGNING_KEY, GOOGLE_PSE_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configWORKSPACE_MCP_CREDENTIALS_DIR

configGOOGLE_MCP_CREDENTIALS_DIR

configSESSION_TIME

configGOOGLE_CLIENT_SECRET_PATH— "": "/path/to/.google_workspace_mcp/client_secret.json"

configGOOGLE_OAUTH_CLIENT_ID— No Auto-extracted from client_secret.json

🔐 secretGOOGLE_OAUTH_CLIENT_SECRET— No Auto-extracted from client_secret.json

configGOOGLE_OAUTH_REDIRECT_URI

configOAUTHLIB_INSECURE_TRANSPORT

configOAUTHLIB_RELAX_TOKEN_SCOPE

configMCP_SINGLE_USER_MODE

configWORKSPACE_MCP_BASE_URI

configPORT

configWORKSPACE_MCP_PORT— 9000 uvx gwmcp setup --email you@gmail.com --client-secret /path/to/secret.json

configWORKSPACE_EXTERNAL_URL

configMCP_ENABLE_OAUTH21

configEXTERNAL_OAUTH21_PROVIDER

configWORKSPACE_MCP_STATELESS_MODE

configOAUTH_CUSTOM_REDIRECT_URIS

configOAUTH_ALLOWED_ORIGINS

configWORKSPACE_ATTACHMENT_DIR

🔐 secretFASTMCP_SERVER_AUTH_GOOGLE_JWT_SIGNING_KEY

configWORKSPACE_MCP_OAUTH_PROXY_STORAGE_BACKEND

configWORKSPACE_MCP_OAUTH_PROXY_VALKEY_HOST

configFASTMCP_HOME

🔐 secretGOOGLE_PSE_API_KEY

configGOOGLE_PSE_ENGINE_ID

configGOOGLE_CLIENT_SECRETS

configWORKSPACE_MCP_HOST

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/gambinoo3005-gwmcp-wao5v4)](https://m8ven.ai/mcp/gambinoo3005-gwmcp-wao5v4)

commit: c5402687d2fb3b999a38195fdcd9dfb8872274d1

code hash: 2916f95a5e7ce990e214f92e496833e257cdcffa79285057bdfd54b64de8e3cd

verified: 7/21/2026, 8:44:19 AM

view raw JSON →