gmail-mcp-localEmailSecurityalexpekachAlicenseAqualityBmaintenanceLocal-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device. Updated 16 days ago (2026-10-07 19:33 UTC)20MIT