Server data from the Official MCP Registry
Secure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.
About
Secure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.
Security Report
This Google Drive MCP server demonstrates good security practices with OAuth-based authentication, proper token storage via environment variables, and reasonable permission scoping aligned with its purpose. However, there are moderate concerns around input validation in text search operations, insufficient validation of URL inputs for image operations, and some edge cases in path handling that could benefit from hardening. The codebase is well-structured with comprehensive documentation, but a few code quality issues warrant attention. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: GOOGLE_DRIVE_OAUTH_CREDENTIALS
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-piotr-agier-google-drive-mcp": {
"env": {
"GOOGLE_DRIVE_OAUTH_CREDENTIALS": "your-google-drive-oauth-credentials-here"
},
"args": [
"-y",
"@piotr-agier/google-drive-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
Google Drive MCP Server
Connect an MCP client to Google Drive, Docs, Sheets, Slides, and Calendar through one self-hosted server. Search and organize files, create and edit Workspace content, manage sharing, and automate multi-step workflows while keeping control of the Google identity and credentials used for every call.
Why this server
- Drive-first workflows: 116 tools cover file management, Shared Drives, permissions, revisions, rich Docs editing, Sheets formatting, Slides authoring, and Calendar events.
- Local or hosted: use stdio for a personal desktop client, Streamable HTTP for a hosted integration, or OAuth-protected team mode for a shared service.
- Identity control: local OAuth supports multiple Google accounts and per-tool account selection; service accounts and externally managed OAuth tokens are also supported.
- Agent-friendly access: tools expose targeted operations, while the optional
gdrive:///resource interface supports direct reading and discovery. - Open and self-hosted: credentials and tokens stay in the environment you operate.
This project remains focused on deep Drive and editor workflows rather than attempting to expose every Google Workspace API.
Client compatibility
Compatibility is determined by the transport and authentication flow a client supports.
| Client type | Transport | Recommended mode |
|---|---|---|
| Claude Desktop | stdio | Local OAuth |
| Other local MCP clients, including Gemini CLI | stdio | Local OAuth |
| claude.ai custom connectors | Streamable HTTP | Team mode |
| Other remote MCP clients | Streamable HTTP | Single identity behind access control, or team mode with OAuth 2.1 |
See Client configuration for configuration examples and transport requirements.
Quick start
1. Create Google OAuth credentials
In a Google Cloud project:
- Enable the Drive, Docs, Sheets, Slides, and Calendar APIs.
- Configure the OAuth consent screen and add your Google account as a test user when the app is in testing.
- Create an OAuth client with application type Desktop app.
- Download the JSON file and save it as:
~/.config/google-drive-mcp/gcp-oauth.keys.json
The setup guide has the complete Google Cloud walkthrough and alternative credential locations.
2. Authenticate
npx -y @piotr-agier/google-drive-mcp auth
Complete the Google consent flow in the browser. Tokens are stored by default at ~/.config/google-drive-mcp/tokens.json.
3. Add the server to your MCP client
For clients that use the common mcpServers configuration shape:
{
"mcpServers": {
"google-drive": {
"command": "npx",
"args": ["-y", "@piotr-agier/google-drive-mcp"]
}
}
}
Restart the client after saving its configuration. Claude Desktop paths and HTTP examples are documented in Client configuration.
4. Make a first tool call
Ask your client:
Run authGetStatus and tell me which Google account is active.
Then try a read-only Drive request:
Search my Google Drive for files modified in the last seven days.
If the identity is wrong or search returns no files, use the troubleshooting guide.
What you can do
Organize Drive
Find PDF files in /Reports, create an Archive folder there, and move files older
than one year into it.
Build a report
Create a Google Sheet for monthly results, summarize it in a Google Doc, and
create a short Google Slides presentation from the summary.
Edit a document
Find the "Project Plan" document, replace the old launch date, format the new
date in bold, and add a comment describing the change.
Prepare a meeting
Create a Calendar event with a Google Meet link and attach the project brief
from Drive.
Documentation
Every section that used to live in this README is now in one of these guides.
| Guide | Contents |
|---|---|
| Setup | Requirements, Google Cloud APIs, OAuth credentials, and installation |
| Client configuration | Supported transports and client configuration |
| Authentication | Local OAuth, multi-account, service accounts, external tokens, and scopes |
| Configuration | CLI flags, environment variables, defaults, and precedence |
| Deployment | Docker, Streamable HTTP, team mode, and reverse-proxy security |
| Tool reference | All Drive, Docs, Sheets, Slides, Calendar, and account tools |
| Troubleshooting | Authentication, API, identity, Docker, and rate-limit problems |
| Development | Repository structure, build commands, tests, and contributions |
Security
- Never commit OAuth credentials, service-account keys, access tokens, refresh tokens, or
tokens.json. - Use the narrowest OAuth scopes that support the tools you need.
- Keep the default HTTP bind address on
127.0.0.1unless the server is protected by TLS and access control. - Use team mode for shared deployments so every request is authenticated as its caller.
- Treat
team-store.jsonas a secret because it contains members' Google refresh tokens.
See Authentication and Deployment for the complete security and identity model.
Development and support
See the development guide to build and test the project.
- Report defects and request features in GitHub Issues.
- Review released changes in the changelog.
- Contributions are welcome through pull requests.
License
Acknowledgments
- Built on the Model Context Protocol.
- Uses the Google APIs Node.js Client.
Reviews
No reviews yet
Be the first to review this server!
More File & Storage MCP Servers
Filesystem
Freeby Modelcontextprotocol · File & Storage
Secure file operations with configurable access controls
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
