Gmail MCP Server

Instructions

Implementation Reference

• src/index.ts:1247-1260 (registration)

  Registration of the 'insert_smime_info' tool, including schema and handler function, using the MCP server.tool method.

  server.tool("insert_smime_info",
    "Insert (upload) the given S/MIME config for the specified send-as alias",
    {
      sendAsEmail: z.string().describe("The email address that appears in the 'From:' header"),
      encryptedKeyPassword: z.string().describe("Encrypted key password"),
      pkcs12: z.string().describe("PKCS#12 format containing a single private/public key pair and certificate chain")
    },
    async (params) => {
      return handleTool(config, async (gmail: gmail_v1.Gmail) => {
        const { data } = await gmail.users.settings.sendAs.smimeInfo.insert({ userId: 'me', sendAsEmail: params.sendAsEmail, requestBody: params })
        return formatResponse(data)
      })
    }
  )

• src/index.ts:1254-1259 (handler)

  Handler function that uses handleTool to validate auth, create Gmail client, insert S/MIME info via Gmail API, and format response.

  async (params) => {
    return handleTool(config, async (gmail: gmail_v1.Gmail) => {
      const { data } = await gmail.users.settings.sendAs.smimeInfo.insert({ userId: 'me', sendAsEmail: params.sendAsEmail, requestBody: params })
      return formatResponse(data)
    })
  }

• src/index.ts:1249-1253 (schema)

  Zod schema defining input parameters: sendAsEmail, encryptedKeyPassword, and pkcs12 for the insert_smime_info tool.

  {
    sendAsEmail: z.string().describe("The email address that appears in the 'From:' header"),
    encryptedKeyPassword: z.string().describe("Encrypted key password"),
    pkcs12: z.string().describe("PKCS#12 format containing a single private/public key pair and certificate chain")
  },

• src/index.ts:50-66 (helper)

  Shared helper function handleTool used by insert_smime_info (and other tools) to handle OAuth2 authentication, Gmail client creation, and API call execution.

  const handleTool = async (queryConfig: Record<string, any> | undefined, apiCall: (gmail: gmail_v1.Gmail) => Promise<any>) => {
    try {
      const oauth2Client = queryConfig ? createOAuth2Client(queryConfig) : defaultOAuth2Client
      if (!oauth2Client) throw new Error('OAuth2 client could not be created, please check your credentials')
  
      const credentialsAreValid = await validateCredentials(oauth2Client)
      if (!credentialsAreValid) throw new Error('OAuth2 credentials are invalid, please re-authenticate')
  
      const gmailClient = queryConfig ? google.gmail({ version: 'v1', auth: oauth2Client }) : defaultGmailClient
      if (!gmailClient) throw new Error('Gmail client could not be created, please check your credentials')
  
      const result = await apiCall(gmailClient)
      return result
    } catch (error: any) {
      return `Tool execution failed: ${error.message}`
    }
  }