gws-admin-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CUSTOMER_ID | No | Google Workspace customer ID. Defaults to 'my_customer'. | my_customer |
| GOOGLE_SA_KEY | No | Path to the service account JSON key file. Overrides the default location ~/.config/gws-admin-mcp/service-account.json. | |
| DELEGATED_ADMIN | No | Email address of the super-admin to impersonate. Overrides the delegatedAdmin field in config.json. | |
| GWS_ADMIN_AUDIT | No | Set to '0' to disable the audit log. Default is '1' (enabled). | 1 |
| GWS_ADMIN_CONFIG_DIR | No | Alternate directory for config files (service-account.json, config.json, audit.log). Default is ~/.config/gws-admin-mcp. | |
| GWS_ADMIN_ALLOW_WRITE | No | Set to '1' to enable write tools. Default is unset (read-only). | 0 |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| users_listB | List directory users. Optional |
| users_getA | Get a single user by email or id. |
| groups_listB | List groups. Optional |
| groups_getA | Get a group by email or id. |
| groups_list_membersC | List members of a group. |
| orgunits_listC | List organizational units. |
| orgunits_getA | Get an org unit by path (e.g. /Sales). |
| roles_listA | List admin roles defined in the org. |
| role_assignments_listA | List role assignments, optionally for a specific user. |
| domains_listA | List the domains and domain aliases in the org. |
| customer_getA | Get the Workspace customer (org) info. |
| devices_list_mobileC | List managed mobile devices. |
| devices_list_chromeosC | List managed ChromeOS devices. |
| reports_activitiesC | Query the audit log for an application. applicationName e.g. login, admin, drive, token, groups, calendar, mobile, user_accounts, saml. |
| reports_usage_userC | Get a user usage report for a date (YYYY-MM-DD). Use 'all' for all users. |
| reports_usage_customerA | Get the customer-wide usage report for a date (YYYY-MM-DD). |
| groupsettings_getA | Get a group's access settings (who can join/post/view, archiving, moderation, etc.). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/antct11/gws-admin-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server