For developers & agents · MCP · OAuth 2.1

Build with Passport.Me

One OAuth consent, then any Model Context Protocol agent reads your users' Gmail, Calendar, Drive, Docs, Sheets, Contacts, and portable AI memories. Read-only unless the user opts in to writes.

Endpoint
https://mcp.passport.me/mcp
Transport
Streamable HTTP
Auth
OAuth 2.1 · PKCE · DCR
Scope
passport.mcp · passport.mcp.write
Access
Read · opt-in write

Add Passport.Me to your agent

MCP clients register automatically via dynamic client registration. Point them at the endpoint and approve the consent screen.

Claude

  1. Settings → Connectors → Add custom connector.
  2. Paste https://mcp.passport.me/mcp.
  3. Approve the Passport.Me consent screen.

ChatGPT

  1. Settings → Connectors → add an MCP server.
  2. Paste https://mcp.passport.me/mcp.
  3. Approve consent, then call tools in chat.

Cursor / custom clients

  1. Register via DCR: POST https://passport.me/register.
  2. Run the authorization-code + PKCE flow against /oauth/authorize and /oauth/token.
  3. Call https://mcp.passport.me/mcp with Authorization: Bearer.

CLI

  1. npm install -g @passportme/cli
  2. passportme login
  3. passportme mcp config --format claude

What an agent can read — and write

After consent, these tools are callable against the MCP endpoint. Visibility reflects what each user has connected; write tools appear only when the user has granted write access.

CategoryMCP tools
Gmailsearch, fetch, email_search, receipt_search, email_open
Calendarcalendar_upcoming
Drive · Docs · Sheetsdrive_find, doc_read, sheet_read
Contactscontacts_list
Walletwallet_portfolio, wallet_recent_activity, wallet_nfts, wallet_defi_positions
Memories · Profileai_memories, demographics, passport_profile_facts
GitHub · Oura · Spotifygithub_user, github_repos, github_starred, github_issues, github_repo_detail, oura_personal_info, oura_daily_sleep, oura_daily_activity, oura_daily_readiness, oura_sleep_periods, oura_workouts, spotify_top_tracks, spotify_top_artists, spotify_recently_played, spotify_playlists, spotify_saved_tracks
Write (opt-in)sheet_create, sheet_append, add_tab, duplicate_sheet, doc_create, doc_append
Sensitive write (opt-in)calendar_create_event, calendar_update_event, calendar_delete_event, sheet_write, drive_trash
Every tool above the write rows is read-only. Sensitive writes overwrite, delete or trash data, or can send calendar invitations. Reads need passport.mcp. Writes need the opt-in passport.mcp.write scope plus the user's per-app switch, and are limited to Sheets, Docs, Calendar and Drive trash — Gmail, Contacts and wallets stay read-only. A write that edits anything the app didn't create, trashes a file, sends invitations, or lands on a calendar other than the user's primary one returns a preview and a confirmation_token first, and runs only after the user approves it on Passport.Me. Every call is logged to the user's activity feed and any app can be disconnected in one click.

Find Passport.Me in MCP directories

Passport.Me is listed as me.passport/mcp in the official MCP Registry, and directories that read the registry pick it up from there.

Building an MCP directory or agent platform? Our server card at /.well-known/mcp/server-card.json describes every tool.

Ready?

Your users' data. Your agent.

Connect once, read everywhere — with consent the user controls.