74
grade C
10 days ago
glama

Google Workspace Code MCP

A code-first MCP server that provides a single tool to execute JavaScript or TypeScript with authenticated access to Google Workspace APIs. It enables flexible interactions with services like Calendar and Drive by running user-provided scripts through a built-in runtime environment.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 2 credentials: GOOGLE_WORKSPACE_MCP_TOKEN, GOOGLE_WORKSPACE_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configGOOGLE_WORKSPACE_AUTH_MODE"": "cloud"
configGOOGLE_WORKSPACE_CALLBACK_HOST
configGOOGLE_WORKSPACE_CLIENT_ID
configGOOGLE_WORKSPACE_CLOUD_FUNCTION_URL
configGOOGLE_WORKSPACE_CONFIG_DIR
configGOOGLE_WORKSPACE_CREDENTIALS
configGOOGLE_WORKSPACE_MCP_AUTH_MODE
configGOOGLE_WORKSPACE_MCP_CLIENT_ID
configGOOGLE_WORKSPACE_MCP_CLOUD_FUNCTION_URL
configGOOGLE_WORKSPACE_MCP_CONFIG_DIR
configGOOGLE_WORKSPACE_MCP_CREDENTIALS
🔐 secretGOOGLE_WORKSPACE_MCP_TOKEN
🔐 secretGOOGLE_WORKSPACE_TOKEN
configWORKSPACE_CLIENT_ID
configWORKSPACE_CLOUD_FUNCTION_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mitsuhiko-google-workspace-mcp-coxfs1)](https://m8ven.ai/mcp/mitsuhiko-google-workspace-mcp-coxfs1)
commit: dfa986ee9982f0b8a54b2544db02d1c750933287
code hash: 1bbb6a9608a70ab23fc5ec4842a1e132623046cd49a88642c612d5c4d4e35e20
verified: 4/11/2026, 3:02:44 PM
view raw JSON →