Verified
community 191 GitHub stars
License: Apache-2.0
Last commit:
aaronsb/google-workspace-mcp
Maintained by Aaron Bockelie
- Access mode schema: act
- read+act; read-only account enforcement
- Domain-Wide Delegation schema: unknown
- Unverified
-
is_agenticstatus - REST-API / Exempt
- APIs covered (5)
- Gmail Drive Calendar Docs Sheets
Verified access capability from upstream documentation or source.
Unverified (unknown) whether service account DWD is used.
Evaluated against Google Workspace OAuth client rules.
Security Notes
Refuses write requests from read-only accounts client-side.
Credential Storage Posture
Local OAuth tokens
is_agentic Policy Notes
Read guide
REST-API based; flag not required per Google notes.
Enforcement begins (flag locks ).
Verified
Declared OAuth 2.0 Scopes
Last verified| Declared Scope / Posture | Risk Classification | Auditor Rationale |
|---|---|---|
| Supports read-only variants of each scope | Supports Read-Only Scopes | Supports least-privilege .readonly scope variants per service. |
Registry JSON Record
src/data/servers.json {
"name": "aaronsb/google-workspace-mcp",
"slug": "aaronsb-google-workspace-mcp",
"url": "https://github.com/aaronsb/google-workspace-mcp",
"maintainer": "Aaron Bockelie",
"type": "community",
"type_detail": "community",
"apis": [
"Gmail",
"Drive",
"Calendar",
"Docs",
"Sheets"
],
"scopes": [
"Supports read-only variants of each scope"
],
"dwd": "unknown",
"dwd_detail": "unknown",
"access": "act",
"access_detail": "read+act; read-only account enforcement",
"credential_storage": "Local OAuth tokens",
"last_commit": "2026-10-16",
"license": "Apache-2.0",
"is_agentic_notes": "REST-API based; flag not required per Google notes.",
"security_notes": "Refuses write requests from read-only accounts client-side.",
"featured": false,
"github_stars": 191,
"verified_on": "2026-10-16"
}