Google Workspace MCP

A Model Context Protocol server that exposes 55 tools across 9 Google Workspace services — Calendar, Gmail, Drive, Docs, Sheets, Slides, Tasks, Forms, and Keep.

Authentication uses a service account with domain-wide delegation, impersonating a Workspace user. No interactive OAuth flow is needed at runtime — ideal for headless agents and automation.

Tool inventory

Related MCP server: GAM MCP Server

Setup

1. Google Cloud service account + domain-wide delegation

This server impersonates a real Workspace user through a service account:

1. Create a GCP project and enable the APIs you need: Calendar, Gmail, Drive, Docs, Sheets, Slides, Tasks, Forms, Keep.

2. Create a service account and enable domain-wide delegation on it (copy its Client ID).

3. In Google Workspace Admin → Security → Access and data control → API controls → Domain-wide delegation, authorize the Client ID with these scopes:

   https://www.googleapis.com/auth/calendar
   https://www.googleapis.com/auth/calendar.events
   https://www.googleapis.com/auth/gmail.modify
   https://www.googleapis.com/auth/gmail.send
   https://www.googleapis.com/auth/drive
   https://www.googleapis.com/auth/documents
   https://www.googleapis.com/auth/spreadsheets
   https://www.googleapis.com/auth/presentations
   https://www.googleapis.com/auth/forms.body
   https://www.googleapis.com/auth/keep
   https://www.googleapis.com/auth/tasks

4. Download the service account's JSON key.

Note: this auth model requires Google Workspace with admin access (domain-wide delegation). It does not work with consumer @gmail.com accounts.

2. Install

python3 -m venv .venv
.venv/bin/pip install -r requirements.txt

3. Configure environment

Verify everything works:

export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service_account.json
export WORKSPACE_USER_EMAIL=you@yourdomain.com
.venv/bin/python verify_access.py

4. Wire up your MCP client

{
  "mcpServers": {
    "google-workspace": {
      "command": "/path/to/google-workspace-mcp/.venv/bin/python",
      "args": ["/path/to/google-workspace-mcp/workspace_mcp_server.py"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/path/to/service_account.json",
        "WORKSPACE_USER_EMAIL": "you@yourdomain.com"
      }
    }
  }
}

Testing tools without a client

mcp_cli.py calls any tool over real MCP JSON-RPC:

.venv/bin/python mcp_cli.py list_calendars
.venv/bin/python mcp_cli.py upload_drive_file '{"file_name": "logo.psd", "local_path": "/tmp/logo.psd", "mime_type": "image/vnd.adobe.photoshop"}'

Tests

.venv/bin/pytest tests/ -v

test_workspace_access.py makes live API calls and is skipped unless WORKSPACE_USER_EMAIL and a key file are configured.

Requirements

Python 3.10+. Deps: fastmcp, google-api-python-client, google-auth, google-auth-httplib2, google-auth-oauthlib (see requirements.txt).

License

MIT — see LICENSE.