← Back to search

io.github.domdomegg/google-contacts-mcp

domdomegg Scanned 14d ago

Allow AI systems to list, search, and manage contacts via Google Contacts.

B
85.6 / 100

Versions

1.1.3latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 15

contact_get
annotations: verified low

Get detailed information about a single contact by resource name.

readOnlyHint true
contacts_list
annotations: verified low

List contacts from the user\'s Google Contacts. Returns names, emails, phone numbers, organizations, birthdays, events, URLs, addresses, nicknames, relations, IM usernames, genders, external IDs, client data, and custom fields.

readOnlyHint true
contact_group_update
annotations: verified low

Rename an existing contact group. Use contact_group_get first to retrieve the current etag. System groups (e.g. "My Contacts", "Starred") cannot be renamed.

readOnlyHint false idempotentHint true destructiveHint true
contact_photo_update
annotations: verified low

Set (or replace) the photo for a contact. Provide the image as base64-encoded JPEG or PNG bytes.

readOnlyHint false idempotentHint true destructiveHint true
contact_group_create
annotations: verified low

Create a new contact group (label) in Google Contacts.

readOnlyHint false idempotentHint false destructiveHint false
contact_group_members_modify
annotations: verified low

Add or remove contacts from a contact group. Use this to manage which contacts belong to a group/label. This is the only way to change group membership - the People API does not support editing it via contact_update.

readOnlyHint false idempotentHint true destructiveHint false
contact_groups_list
annotations: verified low

List contact groups (labels) from the user\'s Google Contacts, including system groups like "My Contacts" and "Starred".

readOnlyHint true
contact_update
annotations: verified low

Update an existing contact. Use contact_get first to retrieve the current etag.

readOnlyHint false idempotentHint true destructiveHint true
contact_photo_delete
annotations: verified low

Remove the photo from a contact, reverting to the default avatar.

readOnlyHint false idempotentHint true destructiveHint true
contact_delete
annotations: verified low

Permanently delete a contact from Google Contacts.

readOnlyHint false idempotentHint true destructiveHint true
contact_group_get
annotations: verified low

Get detailed information about a single contact group, including its member resource names.

readOnlyHint true
contact_group_delete
annotations: verified low

Permanently delete a contact group. System groups (e.g. "My Contacts", "Starred") cannot be deleted. By default this only removes the group/label; pass deleteContacts=true to also delete the member contacts.

readOnlyHint false idempotentHint true destructiveHint true
contact_search
annotations: verified low

Search for contacts by name, email, or phone number.

readOnlyHint true
contact_create
annotations: verified low

Create a new contact in Google Contacts.

readOnlyHint false idempotentHint false destructiveHint false
directory_search
annotations: verified low

Search the organization directory for people (coworkers, etc). Requires directory.readonly scope.

readOnlyHint true

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 43

info
Tool 'contact_get' annotations are consistent annotation_checker · 80%
info
Tool 'contacts_list' annotations are consistent annotation_checker · 80%
info
Tool 'contact_group_update' annotations are consistent annotation_checker · 80%
info
Tool 'contact_photo_update' annotations are consistent annotation_checker · 80%
info
Tool 'contact_group_create' annotations are consistent annotation_checker · 80%
info
Tool 'contact_group_members_modify' annotations are consistent annotation_checker · 80%
info
Tool 'contact_groups_list' annotations are consistent annotation_checker · 80%
info
Tool 'contact_update' annotations are consistent annotation_checker · 80%
info
Tool 'contact_photo_delete' annotations are consistent annotation_checker · 80%
info
Tool 'contact_delete' annotations are consistent annotation_checker · 80%
info
Tool 'contact_group_get' annotations are consistent annotation_checker · 80%
info
Tool 'contact_group_delete' annotations are consistent annotation_checker · 80%
info
Tool 'contact_search' annotations are consistent annotation_checker · 80%
info
Tool 'contact_create' annotations are consistent annotation_checker · 80%
info
Tool 'directory_search' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: contact_get manifest_parser · 85%
info
Tool: contacts_list manifest_parser · 85%
info
Tool: contact_group_update manifest_parser · 85%
info
Tool: contact_photo_update manifest_parser · 85%
info
Tool: contact_group_create manifest_parser · 85%
info
Tool: contact_group_members_modify manifest_parser · 85%
info
Tool: contact_groups_list manifest_parser · 85%
info
Tool: contact_update manifest_parser · 85%
info
Tool: contact_photo_delete manifest_parser · 85%
info
Tool: contact_delete manifest_parser · 85%
info
Tool: contact_group_get manifest_parser · 85%
info
Tool: contact_group_delete manifest_parser · 85%
info
Tool: contact_search manifest_parser · 85%
info
Tool: contact_create manifest_parser · 85%
info
Tool: directory_search manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 405 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%