Internal Infrastructure · CIFAR Technologies Ltd.

CIFAR Technologies gmail-mcp-server

An internal OAuth client operated by CIFAR Technologies Ltd. CIFAR Technologies gmail-mcp-server exposes Gmail operations as Model Context Protocol (MCP) tools callable by AI agents authenticated to CIFAR's Microsoft Entra ID tenant.

Privacy Policy Terms of Service

What CIFAR Technologies gmail-mcp-server does

CIFAR Technologies gmail-mcp-server is a Model Context Protocol server. It accepts tool calls from AI agents (authenticated by Microsoft Entra ID) and translates them into Google Gmail API calls against accounts the operator has explicitly authorized via Google OAuth.

The server is operational infrastructure for CIFAR Technologies. It is not a product offered to third parties. Access is limited to CIFAR operators and service identities registered inside CIFAR's Entra tenant.

Capabilities

Search & read

Run Gmail-syntax queries against authorized inboxes, fetch messages, threads, labels, and attachments.

Send & draft

Compose new messages or save drafts on behalf of the authorized account.

Triage

Mark read or unread, archive, modify labels — routine inbox hygiene from agents.

Data handling

  • OAuth refresh tokens are stored as encrypted Azure Container Apps secrets — never in plaintext environment variables, source control, or logs.
  • Message content is returned to the calling agent for the duration of a tool call and is not persisted by the server. There is no database, cache, or audit log of message bodies.
  • Request logs contain timestamps, the authenticated caller's identity, and the tool name only — no message content, addresses, or subjects.

Security

  • Each calling agent has its own Microsoft Entra ID identity and credentials. There is no shared long-lived password.
  • Server requires the access_as_agent application role on every request; tokens without it are rejected.
  • Transport is TLS 1.2+ end to end, both for the MCP session and for the upstream Gmail API.

Revoking access

The operator can revoke CIFAR Technologies gmail-mcp-server's access to any Gmail account at any time at myaccount.google.com/permissions. Revocation is immediate.

Legal

For full details on data practices and acceptable use, see the Privacy Policy for CIFAR Technologies gmail-mcp-server and the Terms of Service for CIFAR Technologies gmail-mcp-server.

Operator

CIFAR Technologies Ltd. · Burnaby, BC, Canada · info@cifar.tech