Multi-account Google Workspace MCP server — connect multiple Gmail, Google Calendar, and Google Drive accounts with smart routing.

Works with Claude Code, Gemini CLI, GitHub Copilot, Cursor, OpenAI Codex, and any MCP-compatible client.

Most AI coding assistants support a single Google account. If you use multiple Google accounts (personal + work, multiple clients, different orgs), you need to switch between them manually. This MCP server lets you connect them all at once and route requests by label, email, or domain.

• Multi-account — connect unlimited Gmail and Google Workspace accounts
• Smart routing — target accounts by label (work), email, or domain
• Per-account OAuth — different orgs can use their own GCP credentials
• Secure storage — client secrets and tokens stored in OS keychain (file fallback on Linux without GNOME Keyring)
• 30 tools — Mail (9), Calendar (4), Drive (3), Sheets (4), Docs (4), account management (6)
• Account management — add, remove, set default, list accounts
• Cross-platform — standard MCP server works with any compatible client

v0.3.0 adds native Google Sheets and Google Docs tools behind two new OAuth scopes (spreadsheets, documents). Existing users must re-authorize each connected account so new tokens are minted with these scopes:

/gws:reauth

Before approving the browser consent screen, review what the new scopes grant — full read and write access to every spreadsheet and document in that account's Google Drive, including files shared with the account. See the scope rationale table below for details.

You must also add the two new scopes (and enable the Sheets and Docs APIs) in your GCP project's OAuth consent screen configuration before re-auth, or the consent screen will reject the request.

1. Install the plugin — run these two commands inside Claude Code:

/plugin marketplace add orieg/gws-connector
/plugin install gws@gws-connector

2. Set up Google Cloud credentials — the interactive wizard walks you through everything:

/gws:configure

This creates a GCP project, enables APIs, and connects your first account (~5 minutes). See Google Cloud Setup if you prefer manual steps.

3. Connect additional accounts:

/gws:add-account

Each account can use different OAuth credentials from different GCP projects.

gemini extensions install https://github.com/orieg/gws-connector

The binary is downloaded automatically on first use. Then connect accounts inside Gemini:

gws.accounts.add(label: "personal", clientId: "your-client-id", clientSecret: "your-secret")

git clone https://github.com/orieg/gws-connector && cd gws-connector && make build

gws.accounts.add(label: "personal", clientId: "your-client-id", clientSecret: "your-secret")

git clone https://github.com/orieg/gws-connector
cd gws-connector
make build
claude --plugin-dir ./

All gws.* tools accept an optional account parameter:

# Uses default account
gws.mail.search(q: "is:unread")

# Target by label
gws.cal.list_events(account: "work")

# Target by email
gws.drive.search(account: "[email protected]", q: "quarterly report")

Interactive workflows available in both Claude Code and Gemini CLI:

One-time setup (~5 minutes):

1. Go to Google Cloud Console and create a new project (e.g., "GWS Connector")

2. Enable APIs — click each link and hit "Enable":

   • Gmail API
   • Calendar API
   • Drive API
   • Sheets API
   • Docs API

3. Configure the OAuth consent screen:

   • Choose "External" (or "Internal" for Google Workspace orgs)
   • Fill in the app name (e.g., "Claude GWS") and your email for support contact
   • Click "Save"

4. Add scopes — go to Data Access:

   • Click "Add or Remove Scopes"
   • Add these 7 scopes (paste into the "Manually add scopes" box):
     • https://www.googleapis.com/auth/gmail.modify
     • https://www.googleapis.com/auth/calendar
     • https://www.googleapis.com/auth/drive
     • https://www.googleapis.com/auth/spreadsheets
     • https://www.googleapis.com/auth/documents
     • https://www.googleapis.com/auth/userinfo.email
     • https://www.googleapis.com/auth/userinfo.profile
   • Click "Update", then "Save"

   Why each scope is requested:

   Scope	Purpose	Tools
   gmail.modify	Read, draft, modify messages and labels	gws.mail.*
   calendar	Read and create/update events	gws.cal.*
   drive	Search and read files and metadata across Drive	gws.drive.*
   spreadsheets	Read and write Google Sheets cell data and metadata	gws.sheets.*
   documents	Read and write Google Docs content	gws.docs.*
   userinfo.email	Identify the authorizing account (email match on reauth)	account management
   userinfo.profile	Store a display name alongside the email	account management

5. Add test users — go to Audience:

   • Add each Google email address you plan to connect
   • ⚠️ This is required — without this you'll get "Access blocked: has not completed the Google verification process" (error 403) during OAuth

6. Create OAuth credentials — go to Clients:

   • Click "+ Create Client" → "OAuth client ID"
   • Application type: Desktop app
   • Click "Create"
   • Download the JSON file (click the download icon) — this contains your Client ID and Client Secret

If you connect accounts from different Google Workspace orgs, each org needs its own GCP project. Create OAuth credentials in each project and provide them when connecting:

gws.accounts.add(label: "work", clientId: "work-client-id", clientSecret: "work-secret")
gws.accounts.add(label: "personal", clientId: "personal-client-id", clientSecret: "personal-secret")

Client secrets are stored in the OS keychain. Client IDs are stored in the account registry.

gws-connector/
├── cmd/gws-mcp/                 # MCP server entrypoint
├── internal/
│   ├── accounts/                # Account registry & router
│   ├── auth/                    # OAuth flow, token store, client factory
│   ├── server/                  # MCP tool registration & dispatch
│   └── services/                # Gmail, Calendar, Drive API wrappers
│
├── .claude-plugin/              # Claude Code plugin manifest + marketplace
├── .mcp.json                    # Claude Code MCP config
├── gemini-extension.json        # Gemini CLI extension manifest
├── CONTEXT.md                   # Shared behavioral context (both agents)
├── skills/                      # Slash commands (Claude Code + Gemini CLI)
├── hooks/                       # Claude Code session hooks
├── agents/                      # Claude Code workspace agent
│
├── .vscode/mcp.json             # GitHub Copilot MCP config
├── .cursor/mcp.json             # Cursor MCP config
└── codex.json                   # OpenAI Codex CLI config

• Token storage: OS keychain (macOS Keychain, GNOME Keyring, Windows Credential Manager) with automatic file fallback
• Client secrets: OS keychain per account (not stored in config files)
• Account registry: JSON file at ~/.claude/channels/gws/accounts.json (contains client IDs and metadata, no secrets)
• Credential resolution: per-account credentials (keychain) → global env var fallback
• Protocol: MCP (Model Context Protocol) over stdio — compatible with any MCP client

make build          # Build binary
make test           # Run tests with race detector
make test-verbose   # Run tests with verbose output
make lint           # Run go vet
make release        # Cross-compile for all platforms
make clean          # Remove build artifacts

MIT — see LICENSE.