Security

Jump to bottom

Rishap Gandhi edited this page Jun 1, 2026 · 1 revision

Security

Design Principles

Only official Google libraries — no third-party MCP wrappers
~300 lines of code — fully auditable in 10 minutes
Zero external calls — only connects to googleapis.com
No telemetry — no analytics, no reporting, no SaaS dependency
Local credentials — tokens stored with chmod 600

Dependencies (4 total)

Package	Publisher	Verified
`mcp`	Anthropic	✅
`google-api-python-client`	Google	✅
`google-auth-oauthlib`	Google	✅
`python-dotenv`	Open source	✅

Data Flow

Your machine → Google APIs (googleapis.com)

Nothing else. No intermediary servers, no token relays, no hosted backends.