Google Admin MCP Server

A FastMCP server for managing Google Workspace users through the Admin Directory API.

Features

• List users in a domain

• Create new users with secure random passwords

• Get detailed user information

• Suspend and unsuspend users

Related MCP server: EntraID MCP Server

Prerequisites

• Docker

• Google Workspace Admin account

• Google Admin Directory API enabled

• Base64 encoded OAuth2 token in GOOGLE_TOKEN_JSON environment variable

Installation

1. Clone the repository

2. Build the Docker image:

docker build -t google-admin-mcp .

Running the Server

Run the container:

docker run -e GOOGLE_TOKEN_JSON="your_base64_encoded_token" google-admin-mcp

Available Tools

listUsers

Lists users in a domain.

{
  "domain": "yourdomain.com"
}

addUser

Creates a new user with a secure random password.

{
  "primaryEmail": "user@yourdomain.com",
  "firstName": "First",
  "lastName": "Last"
}

getUser

Gets detailed information about a specific user.

{
  "userKey": "user@yourdomain.com"
}

suspendUser

Suspends a user account.

{
  "userKey": "user@yourdomain.com"
}

unsuspendUser

Unsuspends a user account.

{
  "userKey": "user@yourdomain.com"
}

Security Notes

• All users created will be required to change their password on first login

• Passwords are generated securely with:

  • Minimum 12 characters

  • Uppercase and lowercase letters

  • Numbers

  • Special characters

• The server requires a valid OAuth2 token with appropriate Admin Directory API scopes

Error Handling

The server provides clear error messages for:

• Authentication failures

• Invalid parameters

• API errors

• Missing environment variables

License

MIT License