MCP server · TypeScript
gws-admin-mcp: a safe Google Workspace admin console for your AI agent
Let your AI agent do Google Workspace admin — without giving it the keys to break your org.
gws-admin-mcp is a local MCP (Model Context Protocol) server that connects Cursor, Claude Desktop, or any MCP client to the Google Workspace Admin SDK via a service account with domain-wide delegation. Ask your agent things like "which users haven't logged in for 90 days?", "list everyone in the Finance group, including nested members", or "show failed-login audit events for the last week" — and, only in write mode, "offboard jdoe: suspend the account, pull group memberships, move to /Suspended."
The blocker for most admins isn't capability — it's trust. Nobody wants to hand an LLM super-admin power, so the entire design here is the safety model. I run it against my own Workspace domain.
Requires Node 20+, super-admin access to a Workspace domain, and a free Google Cloud project. 7-day refund policy.
Built for people who don't trust an LLM with super-admin
- 40 tools across users, groups, org units, admin roles, domains, mobile and ChromeOS devices, audit and usage reports, and group settings
- Read-only by default — the 23 write tools aren't gated, they're simply not registered unless you start the server with
--allow-write - Confirm-gated destructive calls — delete user/group/OU, wipe device, and deprovision ChromeOS refuse to run without an explicit
"confirm": true - Append-only, secret-redacted audit log of every call, kept locally
- Runs 100% on your machine — the only network traffic is to Google's APIs
- The setup everyone gets wrong, walked through — the Google Cloud and domain-wide-delegation walkthrough with the exact scope string to paste, a
setup-service-account.shbootstrap script, adoctorcommand that pinpoints config problems, a smoke-test suite, and MCP config examples for Cursor and Claude Desktop
FAQ
- Does this send my data anywhere?
- No. It's a local process; traffic goes only to
admin.googleapis.comandgroupssettings.googleapis.com. - Can the agent delete a user by accident?
- In the default configuration it can't even see the delete tool. With writes enabled, deletes additionally require
"confirm": truein the call. - Does it work with Google Workspace Business Starter?
- Yes — anything with the Admin SDK, which means any Workspace subscription. It does not work with personal Gmail.
- Do I need to be a super-admin?
- The impersonated account must be a super-admin — that's an Admin SDK requirement for most of these endpoints. You need admin console access once, to add the delegation grant.
- Which clients does it work with?
- Any MCP-capable client: Cursor, Claude Desktop, Claude Code, and others. Config examples for Cursor and Claude Desktop are included.