Gws Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gws Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center">
Google Workspace for AI agents: Gmail, Calendar, Drive, Sheets, Docs, and Tasks as a curated set of 41 Model Context Protocol tools, built on the official Google Workspace CLI (gws).
<img src="docs/demo.gif" alt="Demo: an agent calls the calendar_events_list tool and gets events back (sample data)" width="800">
</div>
The gws CLI had a built-in MCP server that was removed in v0.8.0 because it exposed 200-400 tools — causing context window bloat in MCP clients. This server takes a curated approach: you choose which Google services to expose, and only a focused set of high-value, narrowly scoped operations are registered as tools. Every tool declares MCP readOnlyHint/destructiveHint annotations so clients can reason about side effects and surface clearer consent prompts.
gws CLI installed and authenticated (npm install -g @googleworkspace/cli && gws auth login)# Install
npm install -g gws-mcp-server
# Or run from source
git clone https://github.com/conorbronsdon/gws-mcp-server.git
cd gws-mcp-server
npm install && npm run build.mcp.json){
"mcpServers": {
"google-workspace": {
"command": "npx",
"args": [
"gws-mcp-server",
"--services", "drive,sheets,calendar,docs,gmail,tasks"
]
}
}
}claude_desktop_config.json){
"mcpServers": {
"google-workspace": {
"command": "npx",
"args": [
"gws-mcp-server",
"--services", "drive,sheets,calendar"
]
}
}
}| Flag | Description | Default |
|---|---|---|
--services, -s | Comma-separated list of services to expose | All services |
--gws-path | Path to the gws binary | gws |
drive (9 tools)drive_files_list — Search and list filesdrive_files_get — Get file metadatadrive_files_create — Create files (with optional upload)drive_files_copy — Copy files (useful for format conversion)drive_files_update — Update file metadata/contentdrive_files_delete — Delete filesdrive_files_export — Export Google Workspace files (Doc, Sheet, Slide) to other formatsdrive_files_download — Download file content (text inline, binary as base64 or saved to a path; Google-native files are exported to a readable format)drive_permissions_create — Share filessheets (4 tools)sheets_get — Get spreadsheet metadatasheets_values_get — Read cell valuessheets_values_update — Write cell valuessheets_values_append — Append rowscalendar (5 tools)calendar_events_list — List eventscalendar_events_get — Get event detailscalendar_events_insert — Create eventscalendar_events_update — Update eventscalendar_events_delete — Delete eventsdocs (3 tools)docs_get — Get document contentdocs_create — Create documentsdocs_batchUpdate — Apply document updatesgmail (6 tools)gmail_messages_list — Search messagesgmail_messages_get — Read a messagegmail_threads_list — Search threadsgmail_threads_get — Read a full threadgmail_threads_modify — Add/remove labels on a thread (archive, mark read, star)gmail_drafts_create — Create a draft (plain text and/or HTML, with reply threading via threadId). Drafts are never auto-senttasks (14 tools)tasks_tasklists_list — List task liststasks_tasklists_get — Get a task listtasks_tasklists_insert — Create a task listtasks_tasklists_update — Replace a task list (full update)tasks_tasklists_patch — Update a task list (partial)tasks_tasklists_delete — Delete a task listtasks_tasks_list — List tasks (filters: completed/hidden/due dates)tasks_tasks_get — Get a tasktasks_tasks_insert — Create a task (optionally nested or positioned)tasks_tasks_update — Replace a task (full update)tasks_tasks_patch — Update a task (common use: mark complete)tasks_tasks_move — Move a task within/across lists or reordertasks_tasks_delete — Delete a tasktasks_tasks_clear — Hide all completed tasks in a listTotal: 41 tools (vs 200-400 in the old implementation)
Edit src/services.ts to add tool definitions. Each tool maps directly to a gws CLI command:
{
name: "drive_files_list", // MCP tool name
description: "List files in Drive", // Shown to AI
command: ["drive", "files", "list"],// gws CLI args
params: [ // Maps to --params JSON
{ name: "q", description: "Search query", type: "string", required: false },
],
bodyParams: [ // Maps to --json body
{ name: "name", description: "File name", type: "string", required: true },
],
}MCP Client (Claude) ←→ stdio ←→ gws-mcp-server ←→ gws CLI ←→ Google APIsThe server is a thin wrapper: it translates MCP tool calls into gws CLI invocations, passes --params and --json as appropriate, and returns the JSON output. Authentication stays in the gws CLI — this server never sees or stores your Google credentials.
git clone https://github.com/conorbronsdon/gws-mcp-server.git
cd gws-mcp-server
npm ci
npm run lint # type-check
npm run build
npm test # vitest, mocks the executor layer — no real gws callsIssues and pull requests are welcome. The most useful contributions are new tool definitions in src/services.ts for high-value gws operations (see "Adding new tools" above). Keep the curated contract: a focused set of narrowly scoped tools, not a 1:1 mirror of every Google API surface. See SECURITY.md for how to report vulnerabilities.
Built and maintained by Conor Bronsdon. I host the Chain of Thought podcast, which covers AI infrastructure, developer tools, and how practitioners actually use this stuff. I built this to give the agent workflows that run the show safe, curated access to Gmail, Calendar, Drive, Sheets, Docs, and Tasks.
<a href="https://glama.ai/mcp/servers/conorbronsdon/gws-mcp-server"> <img width="380" height="200" src="https://glama.ai/mcp/servers/conorbronsdon/gws-mcp-server/badge" alt="gws-mcp-server MCP server" /> </a>
Companion tools:
More at chainofthought.show and on X.
All views, opinions, and statements expressed on this account are solely my own and are made in my personal capacity. They do not reflect, and should not be construed as reflecting, the views, positions, or policies of Modular. This account is not affiliated with, authorized by, or endorsed by Modular in any way.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.