FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs

ai.fgacPublished by fgac.aiOfficial publisherv0.1.1Updated Oct 25, 2026

Multiple Gmail accounts, editable Google Sheets & Docs for AI agents. Deny-by-default access rules.

VerifiedStreamable HTTPWeb executableProductivity & WorkflowCommunication & Collaboration

Overview

AI-generated overview

A hosted MCP server that gives AI agents rule-controlled access to multiple Gmail accounts and selected Google Sheets and Docs.

What you can do
Read mail across one or several connected Gmail accounts, including inboxes teammates delegate to you, with read rules that hide sensitive messages by label or content pattern and send whitelists limiting outbound recipients; send mail only to approved recipients, with permanent deletion never possible; read and edit individual Google Sheets and Docs exposed read-only or read & write, updating cells, appending rows and editing documents there and nowhere else; request extra access through one-click, single-use approval links when a rule denies a call; use a rule-checked raw Google API escape hatch covering the full Gmail, Sheets and Docs API surface; review a request log of every call, what,
When to use it
Use it when an assistant needs to work with Gmail, Google Sheets or Google Docs across several accounts and you want deny-by-default rules, per-file scoping and an audit log rather than broad Google account access. It suits individuals and teams who prefer a hosted setup with no Google Cloud project.
Requirements
A remote Streamable HTTP endpoint with OAuth 2.1 sign-in (dynamic client registration and PKCE); no install or Google Cloud project needed. You sign in with Google and grant access from the FGAC dashboard or approval links. A separate proxy key is needed only for the Google SDK proxy endpoint.
Before you install
The service sits between agents and your Google accounts, so it sees mail and document content; the README says data is never stored or used for training. Agents can send mail and edit sheets and documents within granted scopes, and the raw Google API escape hatch widens reach. Delegated inboxes and grants should be reviewed and revoked when no longer needed.

Installation

In SourceWeft

  1. Open FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/ai.fgac%2Ffgac/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "fgac-ai-multiple-gmail-accounts-google-s": {
      "type": "http",
      "url": "https://fgac.ai/api/mcp"
    }
  }
}

README

FGAC.ai

Fine-grain access control for AI agents on Gmail, Google Sheets and Google Docs.

[Website] [Docs] [MCP Registry] [smithery badge]

Product: https://fgac.ai · Docs: https://fgac.ai/docs · Privacy: https://fgac.ai/privacy

FGAC.ai is a hosted MCP server and API proxy that sits between your AI agents and your Google accounts. Connect one or many Gmail accounts — work, school, personal, and inboxes teammates delegate to you — plus the specific Google Sheets and Docs you choose, and every request passes through deny-by-default access rules you control before it touches Google. Nothing to install, no Google Cloud project needed: sign in with Google and the agent can read that account's mail immediately; sending, editing, and other inboxes are granted from your dashboard or from a one-click approval link the agent hands you when it is denied.

Add FGAC to your agent

ClientHow
Claude.ai / Claude DesktopSearch FGAC in the connectors directory, or add a custom connector with the URL below
Claude Codeclaude mcp add --transport http fgac https://fgac.ai/api/mcp
VS Code / Copilot, Cursor, Windsurf, ClineAdd a remote MCP server: https://fgac.ai/api/mcp (Streamable HTTP, OAuth sign-in) — or find ai.fgac/fgac in the MCP Registry
Smitherysmithery.ai/servers/fgac/fgac
Any Google SDKPoint the client's endpoint override at https://fgac.ai/api/proxy with an FGAC proxy key — see the docs

MCP endpoint: https://fgac.ai/api/mcp (Streamable HTTP; OAuth 2.1 with dynamic client registration and PKCE; discovery at /.well-known/oauth-protected-resource/mcp).

What you get

  • Multiple Gmail accounts — connect several accounts, and let teammates delegate their inboxes to your agent from their own dashboard. Every delegation keeps its own rules and is revocable in one click. No password sharing.
  • Editable Google Sheets and Docs — expose individual files read-only or read & write; agents can update cells, append rows, and edit documents there and nowhere else. The rest of your Drive does not exist to them.
  • Guardrails — read rules hide sensitive mail (2FA codes, password resets, financial alerts) by label or content pattern; send whitelists limit outbound mail to recipients you approve; permanent deletion is never possible.
  • One-click approvals — when an agent needs more (a new recipient, a new sheet), it asks; you approve exactly that grant from a single-use link.
  • Nineteen tools — typed Gmail, Sheets, Docs, and comments tools with safety annotations, plus a rule-checked raw Google API escape hatch covering the full Gmail, Sheets, and Docs API surface.
  • A request log — every call your agent makes, with what was allowed and what was blocked and why.

Your data is never stored or used for training. See the Terms for service terms.

Licensing

Two different things, two different terms:

  • The hosted service at https://fgac.ai is open to anyone — individuals, teams, companies, and schools — under its Terms of Service and Privacy Policy. Connecting an agent through fgac.ai does not involve this repository's license at all.
  • This source code is licensed for personal use only: an independent individual may self-host it to manage their own Gmail or Google Workspace accounts. Use by or on behalf of a company, government agency, or educational institution, and offering the code as a hosted or multi-tenant service, are prohibited without a separate license from the author. See LICENSE for the exact terms and liability limitations.

Developing

This is a Next.js app deployed on Vercel, with Clerk for authentication and Neon Postgres via Drizzle. There is exactly one supported way to run it locally, and it depends on access to the project's Vercel environment:

bash
npx vercel link --yes --project fine-grain-access-control   # once per clonenpx vercel env pull .env.local --environment=development     # dev Clerk + Neon credsnpm run db:branch                                            # isolated Neon branchnpm run dev

Node 20.9+ is required. npm run env:check diagnoses environment problems. Contributor rules, QA workflow, and database safety guards are documented in CLAUDE.md and docs/.

Source: README.md at commit c5237a9

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

2
  1. v0.1.1LatestSep 17, 2026
  2. v0.1.0Sep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.