in this video we're going to look at the new Google Calendar and Gmail integrations to Cloud Desktop and then we're going to talk about approaches to building better versions oursel or better yet taking other people's versions and cloning them essentially get a better version that's able to send emails and delete emails and do a lot more so let's go claude Desktop has Snoop Connect apps button let's see what it is okay this is awesome look at this bring your everyday apps to cloud google Drive Google Calendar Gmail so one thing I noticed here is that Gmail can search and reference emails so it doesn't look like they'll be able to send emails on our behalf but let's just try that one out so let's connect our Gmail okay to authorize Gmail access if you authorize Cloud to access your Gmail messages Cloud may use the data to respond to your prompts so let's just try this out what's the latest email I got okay so cool it's able to read my emails took a little bit longer than I expected basically what it did is it first read my profile then it searched for messages then it read the most recent thread which was from Zoom and Zoom is telling me to sign up for Zoom Workplace Pro Plus no thank you i do not want to sign up for another subscription thank you very much okay so let's see what else it can do can you tell me what filters I have set up this is interesting so it can't tell me about the filters pretty much telling me go to Gmail yourself and look at the filters to be honest I'm pretty welmed right here i'm not overwhelmed i'm not underwhelmed it could search messages it could read you messages it can't send messages it can't change filters so anyways going back to the from Gmail button i think it's kind of lame google calendar is also a new one let's just click this one let's try calendar search okay great now that's turned on schedule a meeting for tomorrow at 2 p.m i don't know if it's going to use the Google integration we just connected or my cal.com MCP server that I built but we'll see okay so it it defaulted first to the calendar event that's actual meeting I have tomorrow the title of the meeting is get my haircut it will be with the Zohan it should last 45 minutes and it'll be virtual okay so this is interesting what happened here is first it tried to use mycal.com MT2P server and then it said "Okay I'll create this in Google calendar and then it went back to the MCP server that I built then it went back to Google Calendar and tried to do in Google Calendar but then it tried to book it with the MCP server." Okay so the bottom line is it failed it wasn't able to do it it got confused with my cal.com MCP server with this calendar integration but I'm pretty sure this Google calendar cannot actually book appointments so to be honest I was pretty excited to see an official Google calendar and Gmail integration built into Cloud Desktop but after trying them out I saw they're pretty limited probably from a safety perspective but if I have to go ahead and book or send emails by myself in Gmail then I rather do that or just install or build my own MCP server use Brave search and find me a Gmail MCP server or some type of MCP server that supports Gmail and what we want to compare here is what an actual MCP server that supports Gmail can do okay great so now we use MCP servers Brave Search and Dilli to look for other MCB servers that integrate Gmail and let's just look at the features they mentioned gong Ros can send and draft emails search emails manage labels okay so if three MCB servers that connect Gmail and they all seem to do more than this official Gmail integration on the one hand I understand why they didn't build in the send emails into this integration because data is risky without anything malicious llms hallucinate they make mistakes and I have a feeling that Enthropic didn't want to build something that could send false emails so that's why they limited it these MCB servers look cool but we would have to verify them and I did a video recently on verifying and vetting MCB servers created by the community because you never know what's in there you have to make sure there's no malicious code and by the way it's a continuous process because MCB servers that are hosted on package managers can be updated and then they could add new malicious code later so you got to be careful in installing other people's MCB servers that's why I recommend building your own MCB servers or cloning an MCB server you see checking it and then making sure you run it locally so it's not getting the latest updates okay so this is Gong Ros or the one we saw before it's 41 commits 160 stars 41 forks so the first thing we're going to do is we're just going to take this URL and put it into our Claude project MCP Evaluator V3 i'm just going to paste this in and we're going to let it do its work and I'll put a link to the MCP evaluator GitHub and video in the description below so long story short this MCB server got it 87 out of 100 which is pretty high so I think this is pretty good so I just want to verify that this does not send data anywhere else it doesn't have any malicious prompting and then I want to talk about forking this and running it locally so that it doesn't get updates and the reason we don't want to get updates at least automatic updates is that we want to make sure that an update doesn't add some malicious code or prompt in there that could then work against us and then we'll be able to update it manually if we want to server only communicates to Google's official API everything is stored locally no prompting tricks or jailbreaks no hidden API endpoints forking running locally to prevent automatic updates is a good approach here's how so now we're going to open up cursor and we're going to clone a repo so to clone the repo you just come here you copy this paste it in here let's open it up here's all the source code for this MCB server by the way if you didn't want to use the cloud project that I set up to evaluate it you could also prompt cursor to look at all the code we're just use the agent installing all the dependencies right now let's go through the steps of doing Google O so we're going to create a new project we're going to call this Gmail MCP so we're going to go to API and services library gmail enable the Gmail API press enable great now what we're going to do is configure the consent screen started Gmail MCP this is just for yourself right so you can keep it internal next give your own contact information doesn't really matter you're not sharing this with anybody else okay so let's go back now to API and services go to credentials create credentials i want to do a OOTH client ID i'm going to call this a desktop app press create it's going to give us our OOTH client created screen with a client ID and client secret this will be blurred out to you and what we're going to do is download our JSON file and then we're going to rename that file to GCP oath keys.json so now we're going to take that file we downloaded and renamed and just place it in here so we just placed that file we downloaded into the root directory okay we're going to do local authentication and because we're running this locally we can just run the O method here we're going to give it permission see we call the Gmail MCP allow okay so now the last thing we have to do is add this MCP server which we're hosting locally to our cloud desktop config file first we have to make sure we get the right path so let's find the index and now we're in VS Code we are going to add a comma here so first we're going to paste this in and then we're going to replace the path now let's save this to open cloud desktop back up and if we have more than 109 tools which we do 122 tools that's crazy so before we even test this out we already saw how this Gmail integration works i'm going to disconnect it i'm also disconnecting Google Calendar i didn't find them very useful so let's disconnect them great so it's very important for me to stress right here that I'm showing you how to install other people's MCP servers locally on your computer and this process is pretty thorough but there are plenty of room for errors and just like we saw in the Claude's official Gmail integration add very limited tools it couldn't do a lot of things and that's for a reason that's to make sure you don't mess things up to make sure you can't say "Hey Claude you deleted all my emails." Now this MCB server we're setting up can send and can delete emails i'm willing to take that risk but I just want to make sure I'm telling you right now it's going to be fine but it is risky so let's just try it out can you send an email to jared [email protected] saying "Hey bro what's up?" and let's see if this works and this video is sponsored by Aqua Voice that is what I've been using to dictate to my computer to claw to cursor and it's been very useful for me over the last few days since I broke my hand so thank you Aqua Voice for sponsoring this video i'll drop a link to Aqua in the description below okay so it's calling the draft email tool we'll allow it okay I like this it says it's been saved as a draft would you like me to send this email now let's just go for it send it okay run to send email from Gmail allow open my phone and there we go hey bro what's up so just to recap we looked at the new official Gmail and Google Calendar integration that was added to Cloud Desktop i found it subpar so what we ended up doing was looking at a few community-made Gmail MCB servers vetting them with my MCP v3 evaluator which just a cloud project with a bunch of system instructions that uses different MCB servers look for any prompt injections look for any malicious code or shady API calls and a few other things once we saw that it looked good we cloned it the reason we're doing that is one of the risks that we learned about with potential tool poisoning attacks is that these MCB servers that are hosted in repositories elsewhere get updated and if someone wanted to maliciously change a few lines of code and then post that version to a repository you would download it unknowingly you could potentially get a malicious version of the MP MCP server which by the way you thought was good before so to avoid all this we downloaded it locally we authenticated locally and we're running it in cloud desktop there's always a risk involved when using open source code especially when you connect it to LLMs especially when you connect it to services that have access to your email to your calendar to your financial services there's always a risk you have to do a risk assessment yourself you can also create your own MCP servers which I've done another video and I'll link to that below but sometimes it's just easier to take someone else's check it out modify it yourself host it locally and then run it so that's what we did in this video so I hope you found this video interesting if you have any questions or feedback drop it in the comments below if you haven't done it yet please subscribe to the channel it really helps me grow thank you for watching and have a great