google-drive-mcp

A Model Context Protocol (MCP) server that provides secure integration with Google Drive, Docs, Sheets, Slides and Calendar. It allows Claude Desktop and other MCP clients to manage files in Google Drive through a standardized interface.

→ piotr-agier/google-drive-mcp · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

github_topic Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: GOOGLE_DRIVE_MCP_ACCESS_TOKEN, GOOGLE_DRIVE_MCP_CLIENT_SECRET, GOOGLE_DRIVE_MCP_REFRESH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configGOOGLE_APPLICATION_CREDENTIALS— Set the standard environment variable to point to a service account JSON key file. Best for server-to-server, CI/CD, and container deployments.

configGOOGLE_CLIENT_SECRET_PATH— Legacy credentials path - use GOOGLE_DRIVE_OAUTH_CREDENTIALS instead

🔐 secretGOOGLE_DRIVE_MCP_ACCESS_TOKEN— Provide a pre-obtained OAuth access token via . This is useful when an external service handles the OAuth flow (e.g., a web app that obtains tokens on behalf of the user).

configGOOGLE_DRIVE_MCP_API_TIMEOUT

configGOOGLE_DRIVE_MCP_AUTH_PORT— export =3100

configGOOGLE_DRIVE_MCP_CLIENT_ID— "": "123456789.apps.googleusercontent.com",

🔐 secretGOOGLE_DRIVE_MCP_CLIENT_SECRET— "": "GOCSPX-..."

configGOOGLE_DRIVE_MCP_DISABLE_RESOURCES

🔐 secretGOOGLE_DRIVE_MCP_REFRESH_TOKEN— "": "1//0dx...",

configGOOGLE_DRIVE_MCP_RETRY_BASE_DELAY

configGOOGLE_DRIVE_MCP_RETRY_MAX

configGOOGLE_DRIVE_MCP_SCOPES— export ="drive.readonly,documents,spreadsheets"

configGOOGLE_DRIVE_MCP_SUBJECT— "": "user@your-domain.com"

configGOOGLE_DRIVE_MCP_TOKEN_PATH— "": "$HOME/.config/google-drive-mcp/tokens.json"

configGOOGLE_DRIVE_OAUTH_CREDENTIALS— "": "$HOME/gcp-oauth.keys.json",

configGOOGLE_TOKEN_PATH— Legacy token path - use GOOGLE_DRIVE_MCP_TOKEN_PATH instead

configMCP_HTTP_HOST— MCP_TRANSPORT=http MCP_HTTP_PORT=3100 =127.0.0.1 google-drive-mcp start

configMCP_HTTP_PORT— MCP_TRANSPORT=http =3100 MCP_HTTP_HOST=127.0.0.1 google-drive-mcp start

configMCP_TESTING

configMCP_TRANSPORT— http MCP_HTTP_PORT=3100 MCP_HTTP_HOST=127.0.0.1 google-drive-mcp start

configXDG_CONFIG_HOME— 2 XDG Config $/google-drive-mcp/tokens.json

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/piotr-agier-google-drive-mcp-c01lsc)](https://m8ven.ai/mcp/piotr-agier-google-drive-mcp-c01lsc)

commit: 7b736d5675ae32c8544b2c2c2343072b40597a87

code hash: f13678be8de26392e1d792a0ebecef76bf17634c46918b3ee17108e48de9b451

verified: 6/4/2026, 11:28:37 AM

view raw JSON →