Skip to main content
Policy Deadline: Google Workspace MCP servers reject OAuth clients not designated is_agentic starting (locks ).
Read remediation guide
Verified
Featured Dossier Official Google
License: proprietary service Last commit: n/a (hosted)

Google Workspace hosted MCP servers (Gmail, Drive, Calendar, Docs, Sheets, Slides, Chat, People)

Maintained by Google

Access mode
schema: act
read+act (per tool)

Verified access capability from upstream documentation or source.

Domain-Wide Delegation
schema: no
no (user OAuth)

Per-user OAuth or non-DWD flow.

is_agentic status
Hosted MCP (Flag Required)

Evaluated against Google Workspace OAuth client rules.

APIs covered (8)
Gmail Drive Calendar Docs Sheets Slides Chat People
calls acts AI Agent is_agentic required Official MCP server {type: officialaccess: actdwd: no} Covered APIs (8) Gmail read / act Drive read / act +6 more APIs Total: 8

Security Notes

No Admin SDK, Alert Center or Reports coverage. Classroom coverage per user brief — not verified in this pass.

Credential Storage Posture

OAuth client in your Google Cloud project; tokens held by MCP client

is_agentic Policy Notes

Read guide

Hosted by Google; requires an OAuth client with 'Use this client for an AI-powered agent' selected. Unmarked clients rejected from ; setting locks on existing clients .

Enforcement begins (flag locks ). Verified

Declared OAuth 2.0 Scopes

Last verified
Declared Scope / Posture Risk Classification Auditor Rationale
Per-service user OAuth scopes (see Google docs) Per-Service OAuth Scopes Depends on tool-level or service-level OAuth configuration in your Google Cloud project.

Registry JSON Record

src/data/servers.json
{
  "name": "Google Workspace hosted MCP servers (Gmail, Drive, Calendar, Docs, Sheets, Slides, Chat, People)",
  "slug": "google-workspace-hosted-mcp-servers",
  "url": "https://developers.google.com/workspace/guides/configure-mcp-servers",
  "maintainer": "Google",
  "type": "official",
  "type_detail": "official-hosted",
  "apis": [
    "Gmail",
    "Drive",
    "Calendar",
    "Docs",
    "Sheets",
    "Slides",
    "Chat",
    "People"
  ],
  "scopes": [
    "Per-service user OAuth scopes (see Google docs)"
  ],
  "dwd": "no",
  "dwd_detail": "no (user OAuth)",
  "access": "act",
  "access_detail": "read+act (per tool)",
  "credential_storage": "OAuth client in your Google Cloud project; tokens held by MCP client",
  "last_commit": "n/a (hosted)",
  "license": "proprietary service",
  "is_agentic_notes": "Hosted by Google; requires an OAuth client with 'Use this client for an AI-powered agent' selected. Unmarked clients rejected from 2026-11-11; setting locks on existing clients 2026-11-12.",
  "security_notes": "No Admin SDK, Alert Center or Reports coverage. Classroom coverage per user brief — not verified in this pass.",
  "featured": true,
  "github_stars": null,
  "verified_on": "2026-10-16"
}

Bi-weekly Google Workspace MCP & is_agentic audit notes

Written for Google Workspace administrators and IAM engineers. Each dispatch summarizes newly indexed MCP servers, OAuth scope diffs across community repositories, and Admin Audit Log queries ahead of the enforcement date.

Published every second Tuesday. No vendor promotions; unsubscribe at any time.