Gmail MCP server with scope-gated tools (readonly / send / modify), path jails for attachments and downloads, hardened OAuth credentials, and Sigstore-signed releases. Read, search, send, draft, label, filter, and thread Gmail from any MCP-enabled AI assistant.