Privacy

Last updated 2026-09-03

gmail-mcp is a personal, private service operated by its owner for a small allowlist of named Google accounts. It is not offered to the public.

What it accesses

With your consent, it reads, sends, and organizes your Gmail on your behalf, and reads your Google account email address to identify you.

What it stores

• Your email address, used to check the allowlist and to identify your session.
• A Google refresh token, stored encrypted, so you do not have to sign in again. Short-lived access tokens are cached for under one hour.
• OAuth client registrations and session tokens for the AI clients you connect.

It does not store the contents of your mail, and it does not log the contents of requests or responses. Google API calls are made directly from this service to Google; no third party receives your data.

Deleting your data

Revoke access at myaccount.google.com/permissions, or ask the operator to remove your account. Removal deletes stored tokens.

Contact

The operator's contact email is shown on the Google consent screen for this app.