gmail send: pass X-Send-Approval from GEORGE_EXTERNAL_SEND_TOKEN env (toggleable external-send approval; unset env to re-gate)

e616a1b6fc4e8c2ad02cb26d984932d9954683cd · 2026-06-18 10:23:44 -0700 · Steve Abrams

Files touched

M index.js

Diff

commit e616a1b6fc4e8c2ad02cb26d984932d9954683cd
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jun 18 10:23:44 2026 -0700

    gmail send: pass X-Send-Approval from GEORGE_EXTERNAL_SEND_TOKEN env (toggleable external-send approval; unset env to re-gate)
---
 index.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/index.js b/index.js
index 93cd4d3..4443e11 100755
--- a/index.js
+++ b/index.js
@@ -41,6 +41,11 @@ async function george(path, { method = "GET", query, body } = {}) {
     headers: {
       Authorization: `Basic ${BASIC_AUTH}`,
       ...(body ? { "Content-Type": "application/json" } : {}),
+      // Human-approval token for George's external-send guard. Sent only when configured,
+      // so removing GEORGE_EXTERNAL_SEND_TOKEN from the env re-gates external sends.
+      ...(process.env.GEORGE_EXTERNAL_SEND_TOKEN
+        ? { "X-Send-Approval": process.env.GEORGE_EXTERNAL_SEND_TOKEN }
+        : {}),
     },
     body: body ? JSON.stringify(body) : undefined,
   });

← a8aaa43 Add account param to all george MCP tools (5-account routing · back to George Mcp · feat: add gmail_get_attachment MCP tool (wraps George /api/a dacdbfb →