
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
@sowonai/mcp-gmail
Advanced tools
A Model Context Protocol (MCP) server for Gmail integration.
MCP (Model Context Protocol) is an open protocol that allows AI assistants, such as Claude Desktop, to interact with external services and tools through a standardized interface. By running this server, you can connect Gmail to Claude Desktop and manage your emails using natural language commands.
To use this MCP server, you first need to generate a configuration snippet that you can add to your AI assistant's (e.g., Claude Desktop) settings. This process involves an initial authentication step to grant the necessary permissions.
credentials.json file./path/to/credentials.json with the actual path to your downloaded credentials file:npx @sowonai/mcp-gmail --install --credentials /path/to/credentials.json
The configuration generated by the --install script should be used here. A typical structure looks like this:
{
"mcpServers": {
"Gmail": {
"command": "npx",
"args": ["-y", "@sowonai/mcp-gmail"],
"env": {
"GOOGLE_CLIENT_ID": "YOUR_CLIENT_ID.apps.googleusercontent.com",
"GOOGLE_CLIENT_SECRET": "YOUR_CLIENT_SECRET",
"GOOGLE_REFRESH_TOKEN": "YOUR_REFRESH_TOKEN_FROM_INSTALL_STEP"
}
}
}
}
Ensure the GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, and GOOGLE_REFRESH_TOKEN in the env section are correctly populated from the output of the --install command.
You can utilize the Gmail MCP in a YAML-based workflow like this:
const workflow = new Workflow({
mainWorkflow: `
version: "agentflow/v1"
kind: "WorkflowSpec"
metadata:
name: "Gmail Assistant"
description: "Gmail MCP usage example"
version: "0.1.0"
agents:
- id: "gmail_agent"
inline:
type: "agent"
model: "openai/gpt-4.1-mini"
system_prompt: |
You are a Gmail assistant that helps manage emails.
Use MCP tools to answer user questions. (MCP tools have the prefix "mcp__")
<information>
Current time: '${new Date().toISOString()}'
</information>
mcp: ["mcp-gmail"]
nodes:
start:
type: "agent_task"
agent: "gmail_agent"
next: "end"
end:
type: "end"
`,
mcpServers: {
"mcp-gmail": {
"command": "npx",
"args": ["-y", "@sowonai/mcp-gmail"],
"env": {
"GOOGLE_CLIENT_ID": "YOUR_CLIENT_ID.apps.googleusercontent.com",
"GOOGLE_CLIENT_SECRET": "YOUR_CLIENT_SECRET",
"GOOGLE_REFRESH_TOKEN": "YOUR_REFRESH_TOKEN_FROM_INSTALL_STEP"
}
}
}
});
// Ask a question to the workflow
const result = await workflow.ask("Show me my recent emails");
console.log(result.content);
This example defines an agent in the workflow that can answer email-related questions using the Gmail MCP server. SowonFlow is an AI-based workflow engine that interprets and executes workflows defined in YAML.
SowonFlow is a workflow product designed to conveniently utilize LLMs, featuring embedded workflows and lightweight workflows as its key characteristics. It can be used to create assistants available on Slack within the SowonAI service, and SowonFlow can also be embedded into your company's services. It can be utilized to create expert assistants that handle specific tasks on Slack.
http://localhost:4100/code
credentials.json. You will need to provide the path to this file when running the --install command.Warning:
Never commit yourcredentials.jsonto a public repository. This file contains sensitive client secret information. The refresh token obtained during the--installprocess should also be kept secure.
FAQs
A Model Context Protocol (MCP) server for Gmail integration
The npm package @sowonai/mcp-gmail receives a total of 6 weekly downloads. As such, @sowonai/mcp-gmail popularity was classified as not popular.
We found that @sowonai/mcp-gmail demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.