mcp-gmail-oauth
by flujo-app
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_GMAIL_LISTEN | No | HTTP listener address in host:port format. | 127.0.0.1:3000 |
| MCP_GMAIL_DB_PATH | No | Path to the SQLite database file. | ~/.mcp-gmail-oauth/mcp-gmail-oauth.sqlite |
| MCP_GMAIL_LOG_LEVEL | No | Log level: debug, info, warn, error. | info |
| MCP_GMAIL_TRANSPORT | No | Transport mode: 'stdio', 'http', or 'remote' (alias for 'http'). | stdio |
| MCP_GMAIL_ALLOWED_HOSTS | No | Comma-separated list of additional allowed hostnames. | |
| MCP_GMAIL_LOCAL_USER_ID | No | Local user identity for stdio mode. | local |
| GOOGLE_OAUTH_CLIENT_FILE | Yes | Path to the Google OAuth client JSON file. Required for both stdio and HTTP modes. | |
| MCP_GMAIL_ENCRYPTION_KEY | No | 32-byte base64url or 64-hex secret for encrypting Google tokens. Required for HTTP with non-loopback public base URL. | |
| MCP_GMAIL_PUBLIC_BASE_URL | No | External origin URL (e.g., https://gmail-mcp.example.com). Required for HTTP/remote mode, defaults to derived listener origin. | |
| MCP_GMAIL_ALLOW_INSECURE_HTTP | No | Set to 'true' to allow loopback HTTP in development (only localhost, 127.0.0.1, ::1). | false |
| MCP_GMAIL_OAUTH_MAX_CONCURRENT | No | Maximum in-flight requests total. | 128 |
| MCP_GMAIL_OAUTH_TRUSTED_PROXY_HOPS | No | Number of trusted proxy hops for client IP detection. | 0 |
| MCP_GMAIL_OAUTH_DYNAMIC_CLIENT_LIMIT | No | Maximum number of unverified dynamic clients stored. | 1000 |
| MCP_GMAIL_OAUTH_MAX_CONCURRENT_PER_IP | No | Maximum in-flight requests per IP. | 8 |
| MCP_GMAIL_OAUTH_RATE_LIMIT_PER_MINUTE | No | OAuth requests per IP per minute. | 120 |
| MCP_GMAIL_OAUTH_DCR_RATE_LIMIT_PER_HOUR | No | DCR requests per IP per hour. | 10 |
| MCP_GMAIL_OAUTH_DYNAMIC_CLIENT_MAX_IDLE_DAYS | No | Inactive DCR client pruning age in days. | 30 |
| MCP_GMAIL_OAUTH_GLOBAL_RATE_LIMIT_PER_MINUTE | No | OAuth requests total per minute. | 10000 |
| MCP_GMAIL_OAUTH_GLOBAL_DCR_RATE_LIMIT_PER_HOUR | No | DCR requests total per hour. | 100 |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/flujo-app/mcp-gmail-oauth'
If you have feedback or need assistance with the MCP directory API, please join our Discord server