Skip to content

Running

MLI MCP Server

Can a Model Context Protocol server give an assistant genuinely useful access to an inbox while keeping the permission surface small enough to reason about?

Status
Running
Last updated
June 2026

01

So far

Scoping tools narrowly matters more than the model. Read a thread, understand the context, draft a reply, with drafting kept separate from sending, covers most of the value while leaving nothing destructive in reach. The interesting failure was the assistant confidently acting on a thread it had only partly retrieved, which pagination handling fixed.

02

Stack

  • Python
  • Model Context Protocol
  • Gmail API

03

Source

Contact

If you are working on something where being wrong matters, I would like to hear about it.

I am open to consulting engagements, research collaborations, and conversations that do not have a clear outcome yet.