Skip to main content
Policy Deadline: Google Workspace MCP servers reject OAuth clients not designated is_agentic starting (locks ).
Read remediation guide
WorkspaceMCP.directory

Google Workspace MCP Server & OAuth Audit Directory

Compare 4 official Google and 13 community Model Context Protocol servers across covered APIs, OAuth 2.0 scopes, read vs. write capability, Domain-Wide Delegation posture, and is_agentic readiness before .

API Gap Map is_agentic Guide
Indexed MCP Servers
17 4 official, 13 community
Hosted Google MCP Endpoints
2 requires is_agentic client
Documented DWD Support
2 service account delegation
Last Audit Revision
unknowns marked Unverified
View mode
APIs covered:
Showing 17 of 17 servers Last verified
Featured Dossier Official Google
Commit: n/a (hosted) License: proprietary service Verified

Google Workspace hosted MCP servers (Gmail, Drive, Calendar, Docs, Sheets, Slides, Chat, People)

Maintainer: Google

Security assessment:

No Admin SDK, Alert Center or Reports coverage. Classroom coverage per user brief — not verified in this pass.

APIs covered: Gmail Drive Calendar Docs Sheets Slides Chat People
OAuth scopes: Per-service user OAuth scopes (see Google docs)
Credential storage: OAuth client in your Google Cloud project; tokens held by MCP client
Access mode
read+act (per tool)
Domain-Wide Delegation
no (user OAuth)
is_agentic status
Hosted / Flag Required

Hosted by Google; requires an OAuth client with 'Use this client for an AI-powered agent' selected. Unmarked clients rejected from ; setting locks on existing clients .

Open security dossier
Official Google Unverified fields
Commit: n/a (hosted) License: proprietary service Verified

Google Drive MCP server

Maintainer: Google

Security assessment:

Endpoint https://drivemcp.googleapis.com/mcp/v1, streamable HTTP.

APIs covered: Drive
OAuth scopes: Scopes unverified
Credential storage: OAuth client; MCP client stores tokens
Access mode
Access unverified
Domain-Wide Delegation
no (user OAuth)
is_agentic status
Hosted / Flag Required

Hosted by Google; requires an OAuth client with 'Use this client for an AI-powered agent' selected. Unmarked clients rejected from ; setting locks on existing clients .

Open security dossier
Featured Dossier Official Google Unverified fields
Commit: License: Apache-2.0 Verified

google/mcp-security

Maintainer: Google Cloud Security

Security assessment:

Workspace alerts reach it only via SecOps ingestion; a remote managed SecOps MCP server also exists. Requires Google SecOps.

APIs covered: Google SecOps (Chronicle) SecOps SOAR Google Threat Intelligence Security Command Center
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
read+act
Domain-Wide Delegation
no
is_agentic status
REST / Exempt

Not a Workspace MCP server; Workspace MCP flag not applicable unless used with Workspace MCP.

Open security dossier
community-vendor Unverified fields
Commit: License: AGPL-3.0 Verified

Tracecat – Google Alert Center tools

Maintainer: Tracecat

Security assessment:

Includes delete/batch-delete alert actions — gate behind human approval. MCP exposure of these tools not verified; they are Tracecat registry tools.

APIs covered: Alert Center API
OAuth scopes: https://www.googleapis.com/auth/apps.alerts (API requirement)
Credential storage: Tracecat secrets store
Access mode
read+act (list/get/metadata/delete/undelete/batch)
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 0 stars
Commit: License: none declared Verified

ag2-mcp-servers/google-workspace-alert-center-api

Maintainer: AG2 (auto-generated)

Security assessment:

Auto-generated from OpenAPI spec, no stars, no license — treat as prototype only.

APIs covered: Alert Center API v1beta1
OAuth scopes: https://www.googleapis.com/auth/apps.alerts (API requirement)
Credential storage: Storage unverified
Access mode
read+act (generated from full OpenAPI incl. delete)
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community 11 stars
Commit: License: MIT Verified

securityfortech/google-admin-mcp

Maintainer: securityfortech

Security assessment:

Can suspend accounts — high impact. Inactive since .

APIs covered: Admin SDK Directory API
OAuth scopes: Admin Directory API scopes (README)
Credential storage: OAuth2 token supplied by user
Access mode
read+act (list users, suspendUser, unsuspendUser)
Domain-Wide Delegation
no (requires OAuth2 token)
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 1 stars
Commit: License: MIT Verified

keyserfaty/mcp-google-workspace-admin

Maintainer: keyserfaty

Security assessment:

Holds a DWD service account key — highly privileged node.

APIs covered: Admin SDK (Directory)
OAuth scopes: Scopes unverified
Credential storage: Service account key file
Access mode
Access unverified
Domain-Wide Delegation
yes
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
Featured Dossier community 3,350 stars
Commit: License: MIT Verified

taylorwilsdon/google_workspace_mcp

Maintainer: Taylor Wilsdon

Security assessment:

Most popular community server; read-only mode recommended for agents processing untrusted email.

APIs covered: Gmail Drive Calendar Docs Sheets Slides Forms Chat Tasks others (see README)
OAuth scopes: Per-service; supports read-only scopes
Credential storage: OAuth tokens locally or bucket storage (README mentions GCS bucket)
Access mode
read+act; read-only mode and per-service --permissions
Domain-Wide Delegation
optional (service accounts with DWD documented)
is_agentic status
REST / Exempt

Uses your own OAuth client against REST APIs, not Google's MCP endpoints; Google says REST-only apps are unaffected.

Open security dossier
community Unverified fields 191 stars
Commit: License: Apache-2.0 Verified

aaronsb/google-workspace-mcp

Maintainer: Aaron Bockelie

Security assessment:

Refuses write requests from read-only accounts client-side.

APIs covered: Gmail Drive Calendar Docs Sheets
OAuth scopes: Supports read-only variants of each scope
Credential storage: Local OAuth tokens
Access mode
read+act; read-only account enforcement
Domain-Wide Delegation
DWD unverified
is_agentic status
REST / Exempt

REST-API based; flag not required per Google notes.

Open security dossier
community Unverified fields 38 stars
Commit: License: MIT Verified

dguido/google-workspace-mcp

Maintainer: Dan Guido

Security assessment:

Upstream repository did not document security notes during the audit pass.

APIs covered: Google Workspace (see README)
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
Access unverified
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 4 stars
Commit: License: Apache-2.0 Verified

wrxck/google-workspace-mcp

Maintainer: wrxck

Security assessment:

Upstream repository did not document security notes during the audit pass.

APIs covered: Google Workspace (see README)
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
Access unverified
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 1,168 stars
Commit: License: MIT Verified

GongRzhe/Gmail-MCP-Server

Maintainer: GongRzhe

Security assessment:

Can send mail; inactive since . Indirect prompt injection risk from email bodies.

APIs covered: Gmail
OAuth scopes: Scopes unverified
Credential storage: Local OAuth token file
Access mode
read+act (send, labels)
Domain-Wide Delegation
no
is_agentic status
REST / Exempt

REST-API based.

Open security dossier
community Unverified fields 103 stars
Commit: License: MIT Verified

tecnologicachile/mail-mcp

Maintainer: tecnologicachile

Security assessment:

Upstream repository did not document security notes during the audit pass.

APIs covered: Gmail/mail
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
Access unverified
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 674 stars
Commit: License: MIT Verified

a-bonus/google-docs-mcp

Maintainer: a-bonus

Security assessment:

Upstream repository did not document security notes during the audit pass.

APIs covered: Docs Drive
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
read+act
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 1,011 stars
Commit: License: MIT Verified

xing5/mcp-google-sheets

Maintainer: xing5

Security assessment:

Upstream repository did not document security notes during the audit pass.

APIs covered: Sheets Drive
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
read+act
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
community Unverified fields 282 stars
Commit: License: MIT Verified

isaacphi/mcp-gdrive

Maintainer: isaacphi

Security assessment:

Inactive since .

APIs covered: Drive Sheets
OAuth scopes: Scopes unverified
Credential storage: Local OAuth token
Access mode
Access unverified
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier
Official Google Unverified fields 31,556 stars
Commit: License: Apache-2.0 Verified

googleworkspace/cli

Maintainer: googleworkspace org

Security assessment:

Listed for context; MCP mode NOT verified in README — confirm before listing as MCP.

APIs covered: Workspace APIs (CLI)
OAuth scopes: Scopes unverified
Credential storage: Storage unverified
Access mode
Access unverified
Domain-Wide Delegation
DWD unverified
is_agentic status
Flag posture unverified

Not documented upstream (likely calls Workspace REST APIs directly).

Open security dossier

Excluded & Unverified Repository Candidates

Recorded in unverified_excluded ()
Open Connector (openconnector.dev) Site responds but no Google Workspace connector found in this pass
Excluded from index
GoogleCloudPlatform/genai-toolbox repo not found at that path
Excluded from index

Bi-weekly Google Workspace MCP & is_agentic audit notes

Written for Google Workspace administrators and IAM engineers. Each dispatch summarizes newly indexed MCP servers, OAuth scope diffs across community repositories, and Admin Audit Log queries ahead of the enforcement date.

Published every second Tuesday. No vendor promotions; unsubscribe at any time.