Check which account a Gmail MCP connector is signed in as

A claude.ai Gmail connector can be authenticated as a different person than the user (e.g. a family member or partner who set it up). Before treating search results as the user's mail, check the toRecipients and the authuser= parameter in returned viewUrls. If they do not match the user, stop searching that mailbox and fall back to another route, such as the user's own Outlook/Gmail in the browser with them logging in. Reading someone else's inbox is both wrong data and a privacy problem.