Skip to main content
Policy Deadline: Google Workspace MCP servers reject OAuth clients not designated is_agentic starting (locks ).
Read remediation guide
Verified
Featured Dossier community 3,350 GitHub stars
License: MIT Last commit:

taylorwilsdon/google_workspace_mcp

Maintained by Taylor Wilsdon

Access mode
schema: act
read+act; read-only mode and per-service --permissions

Verified access capability from upstream documentation or source.

Domain-Wide Delegation
schema: yes
optional (service accounts with DWD documented)

Supports or requires service account Domain-Wide Delegation.

is_agentic status
REST-API / Exempt

Evaluated against Google Workspace OAuth client rules.

APIs covered (10)
Gmail Drive Calendar Docs Sheets Slides Forms Chat Tasks others (see README)
calls acts AI Agent is_agentic exempt Community MCP server {type: communityaccess: actdwd: yes} Covered APIs (10) Gmail read / act Drive read / act +8 more APIs Total: 10

Security Notes

Most popular community server; read-only mode recommended for agents processing untrusted email.

Credential Storage Posture

OAuth tokens locally or bucket storage (README mentions GCS bucket)

is_agentic Policy Notes

Read guide

Uses your own OAuth client against REST APIs, not Google's MCP endpoints; Google says REST-only apps are unaffected.

Enforcement begins (flag locks ). Verified

Declared OAuth 2.0 Scopes

Last verified
Declared Scope / Posture Risk Classification Auditor Rationale
Per-service; supports read-only scopes Supports Read-Only Scopes Supports least-privilege .readonly scope variants per service.

Registry JSON Record

src/data/servers.json
{
  "name": "taylorwilsdon/google_workspace_mcp",
  "slug": "taylorwilsdon-google-workspace-mcp",
  "url": "https://github.com/taylorwilsdon/google_workspace_mcp",
  "maintainer": "Taylor Wilsdon",
  "type": "community",
  "type_detail": "community",
  "apis": [
    "Gmail",
    "Drive",
    "Calendar",
    "Docs",
    "Sheets",
    "Slides",
    "Forms",
    "Chat",
    "Tasks",
    "others (see README)"
  ],
  "scopes": [
    "Per-service; supports read-only scopes"
  ],
  "dwd": "yes",
  "dwd_detail": "optional (service accounts with DWD documented)",
  "access": "act",
  "access_detail": "read+act; read-only mode and per-service --permissions",
  "credential_storage": "OAuth tokens locally or bucket storage (README mentions GCS bucket)",
  "last_commit": "2026-10-09",
  "license": "MIT",
  "is_agentic_notes": "Uses your own OAuth client against REST APIs, not Google's MCP endpoints; Google says REST-only apps are unaffected.",
  "security_notes": "Most popular community server; read-only mode recommended for agents processing untrusted email.",
  "featured": true,
  "github_stars": 3350,
  "verified_on": "2026-10-16"
}

Bi-weekly Google Workspace MCP & is_agentic audit notes

Written for Google Workspace administrators and IAM engineers. Each dispatch summarizes newly indexed MCP servers, OAuth scope diffs across community repositories, and Admin Audit Log queries ahead of the enforcement date.

Published every second Tuesday. No vendor promotions; unsubscribe at any time.