Allows access to Gmail through a guarded Google Workspace REST gateway, enabling email-related operations via generic Workspace API requests.
Provides tools for the full Google Apps Script lifecycle, including project creation, content updates, versioning, deployments, rollback, function execution, process history, and metrics.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Unified Apps Script MCP Show me my Apps Script projects"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
One production-oriented MCP server for the full Google Apps Script lifecycle plus an allowlisted Google Workspace REST gateway. It synthesizes the strongest patterns found across the public Apps Script MCP ecosystem without copying their source.
Apps Script project creation, metadata, HEAD content, merge-safe updates, immutable versions, deployments, rollback, execution, process history and metrics.
Drive-based Apps Script project discovery, which fills the Apps Script API's project-listing gap.
Google Workspace coverage through a guarded REST gateway for Sheets, Docs, Drive, Gmail, Calendar, Tasks, Forms and Slides.
Automatic OAuth discovery, browser launch, PKCE, one-shot loopback callback, secure token refresh and revocation.
MCP safety annotations plus explicit confirm=true boundaries for deployment deletion, function execution and generic non-GET requests.
Automatic pagination for list tools.
Related MCP server: MCP Google Apps Script (GAS) Server
Call auth_status.
Call auth_setup. It searches environment variables, GOOGLE_OAUTH_CLIENT_JSON, the private config directory, project-root credential files and the newest client_secret_*.json in Downloads.
If no Desktop OAuth client exists, the server opens Google Auth Platform's Clients page. Google does not expose a general public API that can create a Desktop OAuth client, so this one console action cannot be safely automated.
Create a Desktop app client and download its JSON. No path is normally needed because Downloads is auto-detected.
Call auth_login. The system browser opens immediately; the server uses PKCE and receives the callback on a random 127.0.0.1 port.
Tokens and imported client configuration are stored under ~/.config/unified-appscript-mcp/ with owner-only permissions.
npm install
npm run buildclaude mcp add --transport stdio --scope user unified-appscript -- node /absolute/path/unified-appscript-mcp/dist/index.js{
"mcpServers": {
"unified-appscript": {
"command": "node",
"args": ["/absolute/path/unified-appscript-mcp/dist/index.js"]
}
}
}Group | Tools |
Authentication |
|
Projects and code |
|
Versions |
|
Deployments |
|
Runtime |
|
Workspace |
|
Google API calls use HTTPS and an explicit host allowlist.
OAuth state and PKCE protect the local authorization flow.
Secrets never appear in tool responses.
Credential files use mode 0600; their directory uses 0700.
Project writes preserve unmentioned files by default and refuse to lose appsscript.json.
Writes are not automatically retried, preventing duplicate versions, deployments or executions.
Destructive operations require an explicit confirmation parameter and remain subject to the MCP client's approval UI.
npm run checkCI runs type checking, compilation and tests on Node.js 20 and 22.
See docs/ECOSYSTEM.md for the repository inventory and the capability synthesis used in this implementation.
MIT. See LICENSE.
Deploy an immutable version with a manifest entry point.
Inputs: scriptId (required), versionNumber (required), description, manifestFileName.
Create a standalone or container-bound Apps Script project. Preserve the returned scriptId.
Inputs: title (required), parentId.
Create an immutable version snapshot of HEAD.
Inputs: scriptId (required), description.
Permanently delete a deployment and break its live URL.
Inputs: confirm (required), scriptId (required), deploymentId (required).
Read HEAD or an immutable version of all Apps Script project files.
Inputs: scriptId (required), versionNumber.
Get one Apps Script deployment.
Inputs: scriptId (required), deploymentId (required).
Get execution, user and failure metrics for an Apps Script project.
Inputs: scriptId (required), deploymentId, metricsGranularity.
Get Apps Script project metadata.
Inputs: scriptId (required).
Get one immutable Apps Script version.
Inputs: scriptId (required), versionNumber (required).
List deployments and entry points, automatically following pagination.
Inputs: scriptId (required), maxPages, pageSize.
List the authenticated user's Apps Script executions with filters.
Inputs: maxPages, pageSize, userProcessFilter.
List executions for one script with optional API filter syntax.
Inputs: scriptId (required), maxPages, pageSize, scriptProcessFilter.
List immutable versions, automatically following pagination.
Inputs: scriptId (required), maxPages, pageSize.
Open an Apps Script project in the system browser.
Inputs: scriptId (required).
Execute a function through an API-executable deployment. The function may cause real external side effects.
Inputs: confirm (required), scriptId (required), functionName (required), devMode, +1 more.
Update Apps Script HEAD. Merge mode preserves unmentioned files and the manifest; replace mode requires appsscript JSON explicitly.
Inputs: files (required), scriptId (required), mode.
Repoint an existing deployment to another immutable version while keeping its deployment ID/URL.
Inputs: scriptId (required), deploymentId (required), versionNumber (required), description, +1 more.
Open the system browser, run Google OAuth with PKCE and a one-shot loopback callback, then store owner-only refresh credentials.
Inputs: profile, timeoutSeconds.
Revoke stored Google authorization and delete local tokens. Environment-provided tokens cannot be deleted.
Inputs: no named parameters.
Auto-detect a Desktop OAuth client. If absent, open the Google Auth Platform Clients page; downloaded client JSON is auto-detected from Downloads.
Inputs: clientFile, openBrowser.
Detect OAuth client and token state; refreshes credentials to verify the connection.
Inputs: no named parameters.
Discover Apps Script project files in Google Drive; unlike Apps Script API, Drive can list projects.
Inputs: query, maxPages, pageSize.
Escape hatch for Google Workspace REST APIs not covered by a dedicated tool. Hosts are allowlisted; Authorization headers are injected. Destructive methods require confirm=true.
Inputs: url (required), body, query, method, +1 more.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 23 tools
Most tools cleanly map to a distinct resource and action, but apps_script_list_processes and apps_script_list_script_processes could be confused at first glance; their descriptions clarify all-user vs per-script scope. The auth, project, version, and deployment tools are otherwise clearly separated.
The dominant pattern is apps_script_<verb>_<noun>, with auth_* tools following a similar lifecycle convention. drive_list_apps_script_projects and google_workspace_request deviate slightly, but the naming remains predictable and readable overall.
At 23 tools, the set is on the heavy side and spans several sub-domains: auth, Drive discovery, execution, versions, deployments, and metrics. Each tool has a legitimate purpose, but the count is borderline for easy agent navigation.
The toolset mirrors the Apps Script API surface well, covering project creation, content read/write, versioning, deployment lifecycle, execution, processes, and metrics. Auth management, Drive-based project discovery, and a Google Workspace escape hatch fill the remaining workflow gaps.
Provides tools for searching Google Workspace documentation and much more.
Permissioned access to Gmail, Drive and Calendar via the user's own Google account
Read and edit GA4, Search Console and Google Tag Manager from any MCP client. 29 tools.
Task management for people and AI agents, with scoped OAuth access to issues, projects, and docs.