Back to Browse

Driveport MCP Server

Developer ToolsModerate6.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Google Drive files: search, list, read, upload, download, folders and trash, as MCP tools.

About

Google Drive files: search, list, read, upload, download, folders and trash, as MCP tools.

Security Report

6.0
Moderate6.0Moderate Risk

driveport is a clean Google Drive MCP server that requires a GOOGLE_ACCESS_TOKEN, sends it only as a Bearer header to the Drive API, and has permissions that match its stated purpose. The only notable points are low-severity: DRIVE_API_URL can redirect the bearer token to any host, and read and upload operations have no explicit size limits. No malicious patterns, hardcoded secrets, shell execution, or path traversal were found. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

GOOGLE_ACCESS_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-driveport": {
      "env": {
        "GOOGLE_ACCESS_TOKEN": "your-google-access-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/driveport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

driveport

Google Drive files as MCP tools, talking to the Google Drive API. driveport is a clean-room rebuild of the core surface of the Google Drive reference MCP server, under a new name: fresh code written from the public Drive API documentation, no copied branding.

Tools (core subset, 8)

search_files, list_files, get_file_metadata, read_file, create_folder, upload_file, download_file, trash_file.

Permissions and sharing, comments, revisions, the changes feed, team drive administration, resumable or chunked uploads, and files.copy / files.watch from the wider Drive surface are not in this subset.

Setup

Set a Google OAuth access token:

export GOOGLE_ACCESS_TOKEN=ya29....

Optionally override the API base with DRIVE_API_URL (default https://www.googleapis.com/drive/v3). Without the token, every tool call fails with an error naming the missing variable.

CLI

npx @reneturcios/driveport search_files '{"query":"name contains '\''report'\''"}'
npx @reneturcios/driveport mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "driveport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/driveport", "mcp"],
      "env": { "GOOGLE_ACCESS_TOKEN": "ya29...." }
    }
  }
}

Docker

docker run -i -e GOOGLE_ACCESS_TOKEN ghcr.io/cloudcorprecords/driveport

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!