google-workspace-mcp
Allows searching and reading emails and threads, managing labels, attachments, and drafts, as well as sending messages and replies.
Enables managing calendars, searching and reading events, checking availability, and creating or updating events.
Enables creating documents, reading document structure and text, and inserting or replacing content.
Allows searching for files, accessing metadata and folder contents, and uploading or exporting files.
Provides tools for reading and writing spreadsheet ranges, accessing table metadata, and performing batch operations.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@google-workspace-mcpFind the latest email from my manager about the Q3 budget and summarize it"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
google-workspace-mcp
A project for building five independent remote MCP servers for Google Workspace: Gmail, Google Calendar, Google Drive, Google Sheets, and Google Docs.
Status: pre-alpha. The MCP servers are not operational yet. The repository currently contains the package scaffold, five placeholder entry points, the downstream OAuth state core, and immutable per-service configuration.
Current status
Implemented:
a Python package with five console entry points;
SQLite-backed downstream OAuth state;
OAuth client registration and PKCE;
token binding to a canonical
resource;refresh token rotation, replay detection, and family revocation;
immutable state ownership metadata for the service and resource;
immutable per-service configuration with strict port and token TTL validation.
All five console entry points are placeholders and exit with a message that the service is not built. The HTTP/MCP transport, Google API integration, service tools, and deployment configuration are not implemented yet.
Related MCP server: google-workspace-mcp-advanced
Planned services
The table describes the target scope. These capabilities are not available yet.
Service | Target capabilities |
| search and read messages and threads, labels, attachments, drafts, send, and reply |
| calendars, event search and retrieval, availability, event creation and updates |
| file search, metadata, folder contents, download, and export |
| spreadsheet metadata, range reads and writes, batch operations |
| document creation, structure and text retrieval, insert, and replace |
In the target architecture, each service runs as a separate process with its own MCP endpoint, tool registry, Google OAuth scopes, Google credentials, and downstream OAuth state.
Target authorization architecture
The design uses two independent layers:
Client to service. The MCP client uses OAuth 2.1 with PKCE. Each access token is bound to one resource, and refresh tokens rotate with replay detection.
Service to Google. Each service uses separate Google credentials and the minimum required OAuth scopes. Google refresh tokens are never returned to MCP clients.
Only the state core for the first layer exists today. HTTP endpoints and the second authorization layer are not implemented.
Technology
Development prerequisites
Git
Python 3.14
uv
A Google Cloud project and OAuth client will be required after the Google API integration is implemented. The current version does not use them.
Development setup
git clone https://github.com/hawkxdev/google-workspace-mcp.git
cd google-workspace-mcp
uv sync --devThe virtual environment does not need to be activated. Run commands through uv run.
Checks
uv run --no-sync pytest -q
uv run --no-sync ruff check .
uv run --no-sync ruff format --check .
uv run --no-sync mypy srcThe --no-sync flag is required when checking the installed dependency version. A plain uv run may resynchronize the environment from the lock file.
Structure
Path | Purpose |
| downstream OAuth state lifecycle |
| immutable per-service environment configuration |
| five placeholder entry points |
| OAuth core and package entry point regressions |
| package metadata, dependencies, and tool configuration |
| provenance of adapted code |
Contributing
The project is in early development. Before making a substantial change, open an issue describing the proposed behavior. Changes must not merge the five services into one process, share credentials between services, or introduce an OAuth bypass.
Provenance
The project adapts the OAuth 2.1 core from jimprosser/obsidian-web-mcp under the MIT License. See NOTICE for details.
The downstream OAuth 2.1 core is based on revision 7e6a52d791a50e3bd533df1060217973ab5be1c8. It includes additional fixes for client and token lifecycles, refresh token rotation, replay detection, and resource canonicalization.
The original project's Obsidian storage and Git synchronization functionality was not copied.
This project uses mcp>=2,<3. The mcp.server.fastmcp package removed in MCP 2.0 is not required; future composition will use mcp.server.mcpserver.
Author
License
MIT, see LICENSE.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityDmaintenanceMCP server for Google Workspace APIs - Docs, Sheets, Drive, Gmail, and Calendar. Enables reading, creating, and editing Google Docs and Sheets, managing comments, reading emails, and viewing calendar events.344517MIT
- AlicenseBqualityCmaintenanceProduction-ready MCP server for Google Workspace providing broad coverage across Gmail, Drive, Calendar, Docs, Sheets, and more, with safe-by-default write operations and markdown-to-Google-Docs support.100MIT
- AlicenseBqualityBmaintenanceA multi-account Google Workspace MCP server that drives Gmail, Google Calendar, and Google Drive across any number of Google accounts in parallel from one server.402MIT
- FlicenseBqualityDmaintenanceMCP server providing full access to Google Workspace services (Gmail, Drive, Calendar, Docs, Sheets, Slides, Forms, Tasks, Contacts) using OAuth authentication.1001
Related MCP Connectors
Streamable HTTP MCP server for Google Calendar and Sheets with OAuth login.
Hosted Google Calendar MCP server for AI agents. No self-hosting or Google Cloud setup.
AI-powered medical document management for cancer patients. Google Drive, Gmail, Calendar via MCP.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/hawkxdev/google-workspace-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server