Last updated: 2026-10-30. Applies to Gmail MCP, a private tool operated at jautis.lt.
Gmail MCP reads messages, threads and labels from a single Google
account using the gmail.readonly scope, and reads the
account's name and email address to identify that account. It does not
send, modify, label or delete mail.
Nowhere. Message content is fetched on demand from Google's API by a server the account owner controls, is returned to the owner's own automation client over a private WireGuard network, and is not stored in a database, not logged, and not transmitted to any third party. No analytics, advertising or tracking.
One person: the account owner. There is no sign-up and no other user can authorise the app.
Access can be revoked at any time from the Google Account's third-party connections page, which invalidates the stored credential.