// SCAN REPORT

Google Workspace MCP

17 tools. 0 can modify or destroy data without limits.

Read-only server. Low risk, but rate limits prevent runaway API costs.

Last updated: 29 Jun 2026

0 can modify or destroy data

17 read-only

17 tools total

Community server · catalogue entry verified 29/06/2026

How to control Google Workspace MCP ↓

TOOL MAP

What Google Workspace MCP exposes to your agents

Read (17) Write / Execute (0) Destructive / Financial (0)

Running more than one server? Check your whole stack →

THE RISK

What can go wrong

Even read-only tools carry cost. An agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up bills.

POLICY

How to control Google Workspace MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Workspace MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "diagnose_google_auth": {
    "limits": [
      {
        "counter": "diagnose_google_auth_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Workspace MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Instant setup, no code required.

FULL CATALOGUE

All 17 Google Workspace MCP tools

READ 17 tools

Read diagnose_google_auth Return a quick summary of the active Google authentication setup. Read download_google_doc_images Download image objects from a Google Doc to a local folder. Read export_google_file Export a Google Workspace file to PDF, XLSX, HTML zip, Markdown, or plain text. Read get_google_chat_message Read one Google Chat message from a resource name or Chat thread URL. Read get_google_chat_space Read metadata for one Google Chat space from a resource name or Chat URL. Read get_sheet_row Fetch one Google Sheets row and map it to the header row. Read inspect_sheet_images Inspect Google Sheets images via XLSX export and detect IMAGE() formulas. Read list_google_chat_memberships List users, bots, and optional groups invited to a Google Chat space. Read list_google_chat_spaces List Google Chat spaces the authenticated user can access. Read read_google_chat_messages Read messages in a Google Chat space from a resource name or Chat URL. Read read_google_chat_thread Read one Google Chat thread from a thread URL or resource name, including the linked message and root message. Read read_google_doc Read a Google Doc as structured JSON with text, tables, and image metadata. Read read_sheet_grid Read Google Sheets grid data including formatted values, formulas, notes, and links. Read read_sheet_values Read raw Google Sheets values for an A1 range. Read resolve_google_file Resolve basic metadata for a Google Docs, Sheets, or Drive file. Read search_sheet Search text across one sheet or all sheets and return matching cells. Read sheet_to_json Convert a Google Sheets tab into JSON records using the header row.

FAQ

Questions about Google Workspace MCP

Is the Google Workspace MCP server safe to use without restrictions? +

The Google Workspace MCP server is primarily read-only with 17 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Google Workspace MCP server expose? +

17 tools across 2 categories: Read, Write. 17 are read-only. 0 can modify, create, or delete data.

How do I enforce a policy on Google Workspace MCP? +

Register the Google Workspace MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Workspace MCP tool call.

Deterministic rules across all 17 Google Workspace MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Instant setup, no code required.

17 Google Workspace MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.