Is workspace-mcp safe to install?

workspace-mcp was flagged as CRITICAL RISK (risk score 186) with 17 findings detected across 81 files. Review the findings before installing.

What security issues were found in workspace-mcp?

Sigil detected 17 findings in workspace-mcp, including patterns related to network_exfil, obfuscation, code_patterns. See the full scan report for details.

Scans/pypi/workspace-mcp

workspace-mcp

pypi

Summary

workspace-mcp v1.15.0 was classified as CRITICAL RISK with a risk score of 186. Sigil detected 17 findings across 81 files, covering phases including network exfiltration, obfuscation, code patterns. Review the findings below before installing this package.

Package description: Comprehensive, highly performant Google Workspace Streamable HTTP & SSE MCP Server for Calendar, Gmail, Docs, Sheets, Slides & Drive

CRITICAL RISK(186)

v1.15.0

22 March 2026, 15:14 UTC

by Sigil Bot

Risk Score

186

Findings

Files Scanned

Provenance

Registry

https://pypi.org/project/workspace-mcp/1.15.0/

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/pypi/workspace-mcp)](https://sigilsec.ai/scans/8E709D7E-15DD-4939-AC0E-BF9EA86DA76B)

HTML

<a href="https://sigilsec.ai/scans/8E709D7E-15DD-4939-AC0E-BF9EA86DA76B"><img src="https://sigilsec.ai/badge/pypi/workspace-mcp" alt="Sigil Scan"></a>

Run This Scan Yourself