Back to Browse

Google Drive MCP Server

File & StorageUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Secure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.

About

Secure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.

Security Report

4.2
Use Caution4.2High Risk

This Google Drive MCP server demonstrates good security practices with OAuth-based authentication, proper token storage via environment variables, and reasonable permission scoping aligned with its purpose. However, there are moderate concerns around input validation in text search operations, insufficient validation of URL inputs for image operations, and some edge cases in path handling that could benefit from hardening. The codebase is well-structured with comprehensive documentation, but a few code quality issues warrant attention. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Path to a Google OAuth 2.0 Desktop app credentials JSON file.Required

Environment variable: GOOGLE_DRIVE_OAUTH_CREDENTIALS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-piotr-agier-google-drive-mcp": {
      "env": {
        "GOOGLE_DRIVE_OAUTH_CREDENTIALS": "your-google-drive-oauth-credentials-here"
      },
      "args": [
        "-y",
        "@piotr-agier/google-drive-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Google Drive MCP Server

MCP Toplist

Connect an MCP client to Google Drive, Docs, Sheets, Slides, and Calendar through one self-hosted server. Search and organize files, create and edit Workspace content, manage sharing, and automate multi-step workflows while keeping control of the Google identity and credentials used for every call.

Why this server

  • Drive-first workflows: 116 tools cover file management, Shared Drives, permissions, revisions, rich Docs editing, Sheets formatting, Slides authoring, and Calendar events.
  • Local or hosted: use stdio for a personal desktop client, Streamable HTTP for a hosted integration, or OAuth-protected team mode for a shared service.
  • Identity control: local OAuth supports multiple Google accounts and per-tool account selection; service accounts and externally managed OAuth tokens are also supported.
  • Agent-friendly access: tools expose targeted operations, while the optional gdrive:/// resource interface supports direct reading and discovery.
  • Open and self-hosted: credentials and tokens stay in the environment you operate.

This project remains focused on deep Drive and editor workflows rather than attempting to expose every Google Workspace API.

Client compatibility

Compatibility is determined by the transport and authentication flow a client supports.

Client typeTransportRecommended mode
Claude DesktopstdioLocal OAuth
Other local MCP clients, including Gemini CLIstdioLocal OAuth
claude.ai custom connectorsStreamable HTTPTeam mode
Other remote MCP clientsStreamable HTTPSingle identity behind access control, or team mode with OAuth 2.1

See Client configuration for configuration examples and transport requirements.

Quick start

1. Create Google OAuth credentials

In a Google Cloud project:

  1. Enable the Drive, Docs, Sheets, Slides, and Calendar APIs.
  2. Configure the OAuth consent screen and add your Google account as a test user when the app is in testing.
  3. Create an OAuth client with application type Desktop app.
  4. Download the JSON file and save it as:
~/.config/google-drive-mcp/gcp-oauth.keys.json

The setup guide has the complete Google Cloud walkthrough and alternative credential locations.

2. Authenticate

npx -y @piotr-agier/google-drive-mcp auth

Complete the Google consent flow in the browser. Tokens are stored by default at ~/.config/google-drive-mcp/tokens.json.

3. Add the server to your MCP client

For clients that use the common mcpServers configuration shape:

{
  "mcpServers": {
    "google-drive": {
      "command": "npx",
      "args": ["-y", "@piotr-agier/google-drive-mcp"]
    }
  }
}

Restart the client after saving its configuration. Claude Desktop paths and HTTP examples are documented in Client configuration.

4. Make a first tool call

Ask your client:

Run authGetStatus and tell me which Google account is active.

Then try a read-only Drive request:

Search my Google Drive for files modified in the last seven days.

If the identity is wrong or search returns no files, use the troubleshooting guide.

What you can do

Organize Drive

Find PDF files in /Reports, create an Archive folder there, and move files older
than one year into it.

Build a report

Create a Google Sheet for monthly results, summarize it in a Google Doc, and
create a short Google Slides presentation from the summary.

Edit a document

Find the "Project Plan" document, replace the old launch date, format the new
date in bold, and add a comment describing the change.

Prepare a meeting

Create a Calendar event with a Google Meet link and attach the project brief
from Drive.

Documentation

Every section that used to live in this README is now in one of these guides.

GuideContents
SetupRequirements, Google Cloud APIs, OAuth credentials, and installation
Client configurationSupported transports and client configuration
AuthenticationLocal OAuth, multi-account, service accounts, external tokens, and scopes
ConfigurationCLI flags, environment variables, defaults, and precedence
DeploymentDocker, Streamable HTTP, team mode, and reverse-proxy security
Tool referenceAll Drive, Docs, Sheets, Slides, Calendar, and account tools
TroubleshootingAuthentication, API, identity, Docker, and rate-limit problems
DevelopmentRepository structure, build commands, tests, and contributions

Security

  • Never commit OAuth credentials, service-account keys, access tokens, refresh tokens, or tokens.json.
  • Use the narrowest OAuth scopes that support the tools you need.
  • Keep the default HTTP bind address on 127.0.0.1 unless the server is protected by TLS and access control.
  • Use team mode for shared deployments so every request is authenticated as its caller.
  • Treat team-store.json as a secret because it contains members' Google refresh tokens.

See Authentication and Deployment for the complete security and identity model.

Development and support

See the development guide to build and test the project.

  • Report defects and request features in GitHub Issues.
  • Review released changes in the changelog.
  • Contributions are welcome through pull requests.

License

MIT

Acknowledgments

Reviews

No reviews yet

Be the first to review this server!