Google Workspace Mcp

io.github.aringad由 GitHub 账号 aringad 发布v1.0.0更新于 Oct 24, 2026

Google Workspace Admin via MCP. Manage users, groups, aliases, org units.

已验证STDIO仅桌面效率与工作流沟通与协作安全与监控

概览

AI 生成的概览

让助手通过自然语言对话管理 Google Workspace 的用户、群组、别名和组织部门。

可以做什么
将 Google Workspace Admin SDK 封装为 MCP 工具。可列出和查看用户、创建用户并自动生成密码、删除或暂停及恢复账号、重置密码、管理邮件别名、列出群组并增删群组成员，以及列出组织部门或在部门间移动用户。删除等破坏性操作需要显式确认。
适用场景
适合希望用对话方式完成日常目录管理任务的 Google Workspace 管理员，例如入职、离职、重置密码、别名与群组调整、组织部门迁移，而不必打开管理控制台。它是仅限桌面的本地服务器，适合个人管理员使用，而非共享或托管部署。
运行要求
需要 Python 3.10+，并本地安装 PyPI 包或源码。需要具备管理员权限的 Google Workspace 账号、已启用 Admin SDK API 的 Google Cloud 项目、服务账号 JSON 密钥，并为该服务账号的 Client ID 配置域范围委派。环境变量：GOOGLE_ADMIN_EMAIL（必填）、GOOGLE_SERVICE_ACCOUNT_FILE（必填，JSON 密钥路径），以及可选的 GOOGLE_CUSTOMER_ID。还需要 Claude Desktop 等 MCP 客户端。
安装前请注意
GOOGLE_SERVICE_ACCOUNT_FILE 指向的密钥文件属于凭据，切勿提交到代码仓库。域范围委派会赋予该服务器对整个域目录的广泛权限，包括创建、暂停和删除用户以及重置密码，因此请仔细审核所授权的 OAuth 范围。删除操作需要显式确认，但其他写入操作不需要。README 称服务器不存储任何数据。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Google Workspace Mcp，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

🔧 Google Workspace MCP Server

🇮🇹 Italiano | 🇬🇧 English

Italiano

Server MCP (Model Context Protocol) per gestire Google Workspace tramite Claude AI e altri assistenti compatibili. Permette di amministrare utenti, gruppi, alias e unità organizzative tramite conversazione naturale.

✨ Funzionalità

ToolDescrizione
gw_list_usersLista utenti con ricerca e filtri
gw_get_userDettaglio completo di un utente
gw_create_userCrea nuovo utente con password auto-generata
gw_delete_userElimina utente (con conferma obbligatoria)
gw_suspend_userSospendi o riattiva un utente
gw_reset_passwordReset password con generazione automatica
gw_manage_aliasAggiungi, rimuovi, elenca alias email
gw_list_groupsLista gruppi del dominio o di un utente
gw_manage_group_memberAggiungi/rimuovi membri dai gruppi
gw_list_org_unitsLista unità organizzative
gw_move_user_orgSposta utente tra unità organizzative

📋 Prerequisiti

  • Python 3.10+
  • Account Google Workspace con accesso admin
  • Progetto Google Cloud con Admin SDK API abilitata
  • Claude Desktop o altro client MCP

🚀 Installazione

bash
pip install google-workspace-mcp

Oppure da sorgente:

bash
git clone https://github.com/aringad/google-workspace-mcp.gitcd google-workspace-mcppip install -r requirements.txt

🔑 Configurazione Google Cloud

1. Crea progetto e abilita API
  1. Vai su console.cloud.google.com
  2. Crea un nuovo progetto (o usa quello esistente)
  3. Vai su API e servizi → Libreria
  4. Cerca e abilita: Admin SDK API
2. Crea Service Account
  1. Vai su API e servizi → Credenziali
  2. Crea credenziali → Account di servizio
  3. Dai un nome (es. mcp-workspace-admin)
  4. Vai nel Service Account → Chiavi → Aggiungi chiave → JSON
  5. Scarica il file JSON (queste sono le tue credenziali)
  6. Annota il Client ID (numero lungo nei dettagli del Service Account)

⚠️ Non serve assegnare ruoli IAM al Service Account. I permessi vengono dalla delega domain-wide.

3. Delega Domain-Wide
  1. Vai su admin.google.com
  2. Sicurezza → Accesso e controllo dati → Controlli API → Gestisci delega a livello di dominio
  3. Clicca Aggiungi nuovo
  4. Inserisci il Client ID del Service Account
  5. Come ambiti OAuth, inserisci:
https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.directory.group,https://www.googleapis.com/auth/admin.directory.orgunit,https://www.googleapis.com/auth/admin.directory.user.alias
  1. Autorizza

⚙️ Variabili d'ambiente

VariabileDescrizioneDefault
GOOGLE_SERVICE_ACCOUNT_FILEPath al file JSON delle credenziali./credentials.json
GOOGLE_ADMIN_EMAILEmail del super admin con delega(obbligatorio)
GOOGLE_CUSTOMER_IDCustomer ID del dominiomy_customer

🔌 Configurazione Claude Desktop

Aggiungi al file di configurazione:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
json
{  "mcpServers": {    "google_workspace": {      "command": "/percorso/completo/google-workspace-mcp/venv/bin/python",      "args": ["/percorso/completo/google-workspace-mcp/server.py"],      "env": {        "GOOGLE_SERVICE_ACCOUNT_FILE": "/percorso/completo/credentials.json",        "GOOGLE_ADMIN_EMAIL": "[email protected]"      }    }  }}

Chiudi completamente Claude Desktop (Cmd+Q su Mac) e riaprilo.

🏢 Configurazione multi-cliente

Puoi gestire più domini aggiungendo istanze separate:

json
{  "mcpServers": {    "gw_cliente_alfa": {      "command": "/percorso/venv/bin/python",      "args": ["server.py"],      "env": {        "GOOGLE_SERVICE_ACCOUNT_FILE": "/percorso/credentials-alfa.json",        "GOOGLE_ADMIN_EMAIL": "[email protected]"      }    },    "gw_cliente_beta": {      "command": "/percorso/venv/bin/python",      "args": ["server.py"],      "env": {        "GOOGLE_SERVICE_ACCOUNT_FILE": "/percorso/credentials-beta.json",        "GOOGLE_ADMIN_EMAIL": "[email protected]"      }    }  }}

💬 Esempi d'uso

Una volta configurato, puoi dire a Claude:

Puoi anche copiare direttamente l'email del cliente con la richiesta e Claude interpreterà automaticamente le operazioni da eseguire.

🔒 Sicurezza

  • Le credenziali del Service Account non vanno mai committate nel repository
  • Le password temporanee generate sono di 16 caratteri con lettere, numeri e simboli
  • Le operazioni distruttive (eliminazione) richiedono conferma esplicita
  • Il Service Account opera con i soli permessi strettamente necessari
  • Nessun dato viene memorizzato dal server MCP

🧪 Test

bash
# Verifica che il server partapython server.py --help
# Test con MCP Inspectornpx @modelcontextprotocol/inspector python server.py

English

MCP (Model Context Protocol) Server to integrate Google Workspace Admin with Claude AI and other compatible assistants. Manage users, groups, aliases and organizational units through natural conversation.

✨ Features

ToolDescription
gw_list_usersList users with search and filters
gw_get_userFull user details
gw_create_userCreate new user with auto-generated password
gw_delete_userDelete user (requires explicit confirmation)
gw_suspend_userSuspend or reactivate a user
gw_reset_passwordReset password with automatic generation
gw_manage_aliasAdd, remove, list email aliases
gw_list_groupsList domain or user groups
gw_manage_group_memberAdd/remove group members
gw_list_org_unitsList organizational units
gw_move_user_orgMove user between organizational units

📋 Prerequisites

  • Python 3.10+
  • Google Workspace account with admin access
  • Google Cloud project with Admin SDK API enabled
  • Claude Desktop or another MCP client

🚀 Installation

bash
pip install google-workspace-mcp

Or from source:

bash
git clone https://github.com/aringad/google-workspace-mcp.gitcd google-workspace-mcppip install -r requirements.txt

🔑 Google Cloud Setup

1. Create project and enable API
  1. Go to console.cloud.google.com
  2. Create a new project (or use existing one)
  3. Go to APIs & Services → Library
  4. Search and enable: Admin SDK API
2. Create Service Account
  1. Go to APIs & Services → Credentials
  2. Create Credentials → Service Account
  3. Name it (e.g., mcp-workspace-admin)
  4. Go to the Service Account → Keys → Add Key → JSON
  5. Download the JSON file (these are your credentials)
  6. Note the Client ID (long number in Service Account details)

⚠️ No IAM roles needed on the Service Account. Permissions come from domain-wide delegation.

3. Domain-Wide Delegation
  1. Go to admin.google.com
  2. Security → Access and data control → API controls → Manage Domain Wide Delegation
  3. Click Add new
  4. Enter the Service Account Client ID
  5. For OAuth scopes, enter:
https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.directory.group,https://www.googleapis.com/auth/admin.directory.orgunit,https://www.googleapis.com/auth/admin.directory.user.alias
  1. Authorize

⚙️ Environment Variables

VariableDescriptionDefault
GOOGLE_SERVICE_ACCOUNT_FILEPath to credentials JSON file./credentials.json
GOOGLE_ADMIN_EMAILSuper admin email with delegation(required)
GOOGLE_CUSTOMER_IDDomain customer IDmy_customer

🔌 Claude Desktop Configuration

Add to config file:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
json
{  "mcpServers": {    "google_workspace": {      "command": "/full/path/to/google-workspace-mcp/venv/bin/python",      "args": ["/full/path/to/google-workspace-mcp/server.py"],      "env": {        "GOOGLE_SERVICE_ACCOUNT_FILE": "/full/path/to/credentials.json",        "GOOGLE_ADMIN_EMAIL": "[email protected]"      }    }  }}

Fully quit Claude Desktop (Cmd+Q on Mac) and reopen it.

💬 Usage Examples

Once configured, you can tell Claude:

You can also paste client emails with requests directly — Claude will automatically interpret the operations to perform.

🔒 Security

  • Service Account credentials must never be committed to the repository
  • Temporary passwords are 16 characters with letters, numbers, and symbols
  • Destructive operations (deletion) require explicit confirmation
  • The Service Account operates with minimum necessary permissions
  • No data is stored by the MCP server

🧪 Testing

bash
# Verify server startspython server.py --help
# Test with MCP Inspectornpx @modelcontextprotocol/inspector python server.py

📄 License

MIT License — See LICENSE for details.

👨‍💻 Author

Developed by Mediaform s.c.r.l. — Genova, Italy

Built with MCP and Google Admin SDK

来源：README.md，提交 1fd8367

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v1.0.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分