# Google Workspace MCP

An MCP server for Google Workspace admin work: 2SV gaps, wasted licenses, sharing drift and safe offboarding.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed · ★ 62
- Author: Servosity
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Servosity/msp-skills/tree/HEAD/skills/google-workspace
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/google-workspace-mcp

## What it does

The server hands your agent access to the Google Workspace API so it can look for weak spots in a tenant: accounts missing two-step verification, licenses nobody uses, file permissions that drifted from what was intended. Offboarding is covered too — you can shut an account down without cutting off the access that still matters.

Two binaries land in your user bin path: `google-workspace-cli` and `google-workspace-mcp`. Claude, Codex and Cowork pick up the skill from `SKILL.md`. Cursor, Windsurf, Cline, Zed and GitHub Copilot connect over MCP, with wiring instructions per client.

Do not start HTTP mode (`--transport http`), not even on localhost. This build validates a token but ships without request size or timeout caps. That path is what ChatGPT and Copilot Studio would need, so remote agents are out for now — stick to stdio. If you opened a tunnel for a remote agent, tear it down. The MCP tools act with your credentials and can change settings, so scope that access carefully.

## Requirements
- Environment variables: `GOOGLE_WORKSPACE_TENANT`, `GOOGLE_WORKSPACE_MCP_READ_ONLY`, `GOOGLE_WORKSPACE_TOKEN`, `ADMIN_ACCESS_TOKEN`, `GOOGLE_WORKSPACE_MCP_HTTP_TOKEN`, `GOOGLE_WORKSPACE_BASE_URL`, `GOOGLE_WORKSPACE_USER_AGENT`, `PRINTING_PRESS_CLIENT_PROFILE` — keys and tokens: ask the human for the values, never commit them or put them in shared files.
- Works with: Google Workspace

## Install

### Claude Code (native platform)

**Install**
- The MCP registry has no launch command for it: see the repository README

## When to use it
- find accounts without two-step verification
- count licenses that sit unused
- check where shared file permissions drifted
- offboard a departing employee without losing needed access
- wire Workspace admin tasks into an agent with no code

## Example prompts
- List the accounts in this domain that don't have two-step verification
- How many licenses are going unused in this tenant?
- Run offboarding for this employee and revoke their access

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119160
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47392
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43872

From the same set: [servosity/msp-skills](https://affpapa.org/en/nevibecode/by/servosity/msp-skills.md) — 20 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md