Skip to main content
Glama

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
MASTER_KEYYesBase64-encoded 32-byte key to encrypt token store (e.g. openssl rand -base64 32)
GOOGLE_PROFILENoWrite policy: read-only (default), safe-writes, or full-writesread-only
GOOGLE_ACCOUNTSYesComma-separated alias:email pairs, e.g. work:you@co.com,personal:you@gmail.com
GOOGLE_CLIENT_IDYesOAuth Desktop client ID from Google Cloud
GOOGLE_READ_ONLYNoSet to 'true' to hard-disable all writes
TOKEN_STORE_PATHNoOverride path for encrypted token directory (default: ~/.config/mcp-google-multi/tokens)
GOOGLE_WRITE_DENYNoGlob overrides to deny specific write tools, e.g. '*:delete*'
GOOGLE_WRITE_ALLOWNoGlob overrides to allow specific write tools, e.g. 'calendar:*, sheets:update*'
GOOGLE_CLIENT_SECRETYesOAuth Desktop client secret from Google Cloud
GOOGLE_ADMIN_ACCOUNTSNoAliases granted Workspace admin scopes
GOOGLE_OPTIONAL_SCOPESNoExtra scope bundles: 'forms', 'chat', or comma-separated

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": true
}
prompts
{
  "listChanged": true
}

Tools

Functions exposed to the LLM to take actions

NameDescription
discover_allA

Reveal ALL curated Google tools at once (instead of per-service discovery). Use when starting substantial Google work; prefer these over google_api_call. Pair with discover_reset.

discover_resetA

Collapse the tool surface back to the configured default, reclaiming context budget after heavy Google work. All tools remain callable by name after collapsing.

gmail_discoverA

Discover gmail: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: search, read, read_thread, read_batch, send, download_attachment, create_draft, modify_labels, trash, delete +13 more; 57 generated ops: users.

drive_discoverA

Discover drive: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: search, read, list, upload, download, export, create_folder, update, delete, trash +26 more; 35 generated ops: approvals, files, drives, teamdrives, changes, apps +6 areas.

calendar_discoverA

Discover calendar: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: list_calendars, list_events, get_event, create_event, update_event, respond_event, delete_event, quick_add, move_event, list_instances +2 more; 27 generated ops: acl, calendar, calendars, events, settings, channels +1 areas.

sheets_discoverA

Discover sheets: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: create, get, read_range, write_range, append_rows, clear_range, batch_read, batch_write, add_sheet, delete_sheet +20 more; 7 generated ops: spreadsheets.

docs_discoverA

Discover docs: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: create, get, read, insert_text, replace_text, delete_range, update_style, insert_table, create_named_range, delete_named_range +17 more.

contacts_discoverA

Discover contacts: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: search, resolve, get, list, create, update, delete, groups_list, group_members, group_create; 14 generated ops: people, contact, other.

searchconsole_discoverA

Discover searchconsole: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: sites_list, sites_get, sites_add, sites_delete, sitemaps_list, sitemaps_get, sitemaps_submit, sitemaps_delete, searchanalytics_query, url_inspect; 1 generated ops: url.

tasks_discoverA

Discover tasks: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: lists_list, list_get, list_insert, list_update, list_delete, list, get, insert, update, delete +2 more; 2 generated ops: tasklists, tasks.

meet_discoverA

Discover meet: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: conference_records_list, conference_record_get, recordings_list, transcripts_list, transcript_entries_list; 13 generated ops: conference, spaces.

workspaceevents_discoverA

Discover workspaceevents: lists the catalog and reveals its hidden tools; call first, then call the tool by name. Ops: 15 generated ops: tasks, subscriptions, message, operations.

google_api_searchA

Search the Google API Discovery index for any Workspace REST method, including ones with no dedicated tool here. Returns method ids + parameters to invoke via google_api_call. APIs: gmail, drive, calendar, sheets, docs, slides, forms, people, searchconsole, tasks, chat, meet, driveactivity, drivelabels, admin_directory, admin_reports, admin_datatransfer, groupssettings, analyticsadmin, analyticsdata, appsmarket, classroom, cloudidentity, cloudsearch, groupsmigration, keep, licensing, postmaster, reseller, script, vault, workspaceevents.

google_api_callA

Invoke any Google Workspace REST method by Discovery id (escape hatch for operations without a dedicated tool). Find methods with google_api_search first. A write asks the connected human to confirm the real call (account, verb, params, a destinations-first body summary) unless GOOGLE_PROFILE=full-writes with no outbound allowlist; GOOGLE_READ_ONLY or a matching GOOGLE_WRITE_DENY still refuse outright. On reads, pass a fields query param (Google partial response) to keep the payload small. Returns JSON only; for binary/file content (media downloads, drive.files.export) use drive_download / drive_export instead.

account_listA

List the configured Google accounts: alias, email, admin flag, token status (ok / expired_refreshable / needs_reauth / missing / decrypt_error), and which one is the default. Pass verbose: true for the full per-account report (granted vs configured scopes).

diagnoseA

Health report for this server: runtime, config, keys, per-account token status, scope grants, and API enablement. Read-only; returns copy-pasteable fixes for anything wrong. Call this to diagnose auth/config failures.

account_addA

Add a new Google account: pass alias + email directly (plus optional bundles/allBundles/admin), or pass nothing for an interactive form where the client supports elicitation. Writes the registry and runs Google consent in the browser. No file editing or restart needed to use the account (tools of a service it newly enables register at the next restart). Requires GOOGLE_CLIENT_ID/SECRET (run the setup prompt first if missing).

account_reauthA

Re-authenticate an existing Google account (recover a dead refresh token, or grant scopes after a profile change). Runs Google consent in the browser. Pass the account alias.

account_write_configA

Register this server with your MCP client (Claude Code / Claude Desktop / Cursor) so you don't hand-edit JSON. Default: returns the exact snippet/command to add. Pass write:true to write detected file-based configs in place (backs up first, never clobbers a malformed file). Secrets are never inlined.

Prompts

Interactive templates invoked by user choice

NameDescription
setupGuided Google Cloud Console prelude: project, APIs, consent screen, OAuth client, and credentials. The one-time browser setup that has no API.

Resources

Contextual data attached and managed by the client

NameDescription

No resources

TDQS

A3.9/5.0

Scored across 19 tools

Disambiguation4/5

The set has clear seams: per-service `<service>_discover` catalogs, `account_*` lifecycle tools, `google_api_search`/`google_api_call` escape hatches, and `diagnose`. The only mild overlap is between `discover_all` and the per-service discovers (and `discover_reset`), but descriptions explicitly frame these as reveal-all / reveal-one / collapse-back, so an agent can pick correctly.

Naming Consistency4/5

Consistent sub-groups exist: ten `<service>_discover` tools, four `account_*` tools, `google_api_search`/`google_api_call`, and `discover_all`/`discover_reset`. The only friction is verb placement varying across groups (gmail_discover is noun_verb, while account_list and discover_all are verb_noun), but each family is internally predictable.

Tool Count4/5

19 tools is slightly above the ideal band, but the count is justified by genuine multi-service breadth (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, Workspace Events) plus account/auth plumbing. Progressive disclosure means the effective surface stays small, so each tool earns its slot.

Completeness4/5

Coverage is broad: account add/list/reauth/config-write, health diagnostics, discovery control, generic REST search/call, and per-service catalogs covering the core Workspace apps. The main gap is account lifecycle teardown (no account_remove/delete or explicit default-account switching), plus services like Chat/Keep only reachable via `google_api_call` rather than curated tools.

Maintenance

ActivityActive
ResponsivenessResponsive