Google Calendar MCP
Google Calendar MCP server with extensive support for calendar management, multi-account support, and conflict detection
Score Breakdown
Server Info
- Package
- @cocal/google-calendar-mcp
- Registry
- npm
- Repository
- nspady/google-calendar-mcp
- Maintainer
- Community
- Category
- Communication
- Tags
- calendargooglescheduling
- Last Scanned
- 7 Apr 2026
Findings
3 issuesAuthentication & Identity
MEDIUMHTTP/SSE transport supports per-request credentials
Uses Google OAuth 2.0 with refresh tokens stored locally at ~/.config/google-calendar-mcp/tokens.json. Supports both stdio (default, for Claude Desktop) and HTTP (StreamableHTTPServerTransport) transports. HTTP mode is localhost-only with strict origin validation. No MCP OAuth spec (.well-known endpoint) implementation. Multi-account support with friendly nicknames.
Implement the MCP OAuth spec so users authenticate directly without platform mediation.
Maintenance & Trust
LOWCommunity-maintained by nspady (cocal)
No official vendor backing.
Seek vendor verification.
MEDIUM6 dependency vulnerabilities (5 high)
npm audit found 5 high severity CVEs.
Update vulnerable dependencies.
Tools
12 total| Name | Description | Risk |
|---|---|---|
| list-calendars | List all available calendars | read |
| list-events | List events from one or more calendars. Supports both calendar IDs and calendar names. | read |
| search-events | Search events across calendars with free text query | read |
| get-event | Get details of a specific event | read |
| list-colors | List available calendar and event colors | read |
| create-event | Create a new calendar event with conflict and duplicate detection | write |
| create-events | Create multiple calendar events in batch (1-50 events) | write |
| update-event | Update an existing calendar event with recurring event support | write |
| delete-event | Delete a calendar event | write |
| get-freebusy | Query free/busy information for calendars and groups | read |
| get-current-time | Get the current time in a specific timezone | read |
| respond-to-event | Respond to an event invitation (accept, decline, tentative) | write |
Deploy Google Calendar MCP securely
CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.
Deploy on CompleteFlow