B

Gong MCP Server

Rust-based MCP server providing read-only access to Gong call data, transcripts, participants, and users via tools and resources

Overall Score84/100

Score Breakdown

Server Info

Package
gong-mcp
Registry
crates.io
Maintainer
Community
Category
CRM & Sales
Tags
conversation-analyticssalesrevenue-intelligence
Last Scanned
7 Apr 2026

Findings

4 issues

Authentication & Identity

MEDIUMHTTP/SSE transport supports per-request credentials

Supports both stdio and Streamable HTTP transport (via --mode http flag). HTTP transport uses axum with LocalSessionManager on a configurable host/port. No MCP OAuth spec implementation. Gong API credentials passed via environment variables. Uses HTTP Basic Auth when calling the Gong API. Auto-detects Docker for host binding.

Remediation

Implement the MCP OAuth spec so users authenticate directly without platform mediation.

LLM Safety

HIGHTool descriptions contain instructional language

Descriptions include directives that could influence LLM behavior beyond tool selection.

Remediation

Remove instructional language. Descriptions should be purely factual.

Data Exposure

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

LOWCommunity-maintained by Cedric Ziel (cedricziel)

No official vendor backing.

Remediation

Seek vendor verification.

Tools

1 total
NameDescriptionRisk
search_callsSearch Gong calls with flexible filters. Returns basic call metadata (id, title, started, duration, direction, parties, url) by default. Use include_structure to add call agenda data. Supports pagination for large result sets - use limit to reduce response size. All parameters are optional - returns recent calls if no filters provided.read

Deploy Gong MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow