Google Workspace MCP — provides tools to interact with Gmail, Google Calendar, Google Drive, and Google Tasks via OAuth 2.0 authentication
Server has 16 tools with consistent naming (verb_noun pattern) and complete input schemas. Descriptions are present but often generic and lack actionable context. Most parameters have type definitions and descriptions, but many descriptions are under 50 chars and lack guidance on when/why to use tools. Output schemas are not documented, responses are JSON strings without field-level documentation. Error handling is minimal; no recovery guidance or categorization. Security model is sound (OAuth tokens server-side), but no audit logging visible. Composition is good, tools are single-responsibility and chainable via user_google_email parameter.
Create a calendar event. start_datetime / end_datetime: RFC 3339, e.g. "2024-06-15T10:00:00" timezone: IANA tz name, e.g. "America/New_York" attendees: list of email addresses
Save an email as a draft (does not send).
Create a task. due: RFC 3339 timestamp, e.g. "2024-06-01T00:00:00.000Z"
Retrieve calendar events. time_min / time_max: RFC 3339 strings, e.g. "2024-06-01T00:00:00Z"
Read the full content of a Gmail message by its ID.
Return the Google accounts that have stored OAuth tokens.
Output schemas not documented. Tools return JSON strings but field structure is not specified. LLMs cannot plan downstream calls or extract specific fields without trial-and-error.
Generic descriptions lack actionable context. Many descriptions (e.g., 'List all Gmail labels for the account') are under 50 chars and do not explain when/why to use the tool or what distinguishes it from similar tools.
No error handling guidance. Tools return JSON but do not document error cases, recovery steps, or how to distinguish retryable vs. fatal failures. LLMs cannot self-correct on failures.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 57 | 2026-07-28+ | v2 |
List files inside a specific Drive folder by its ID.
List all Gmail labels for the account.
List all calendars accessible by the account.
List all Google Task lists for the account.
List tasks in a task list. Use '@default' for the default list.
Read the text content of a Drive file. Google Docs/Sheets/Slides are exported as plain text / CSV. Binary files are read and decoded as UTF-8.
Remove the stored token for a Google account.
Search Google Drive files using Drive query syntax. Examples: query="name contains 'report'" query="mimeType='application/vnd.google-apps.document'" query="'root' in parents and trashed = false"
Search Gmail messages using the Gmail search syntax. Examples: query="is:unread" query="from:[email protected] subject:report" query="after:2024/01/01 has:attachment"
Send an email. Optionally pass reply_to_message_id to reply in-thread.
No pagination documentation. Tools like search_gmail_messages and search_drive_files accept page_size but do not document how to fetch next page (cursor, offset, or total count). Large result sets may exceed context window.
No audit logging visible. Tools modify state (send_gmail_message, create_calendar_event, create_task) but no logging of who called what, when, or with what parameters. Compliance and incident response are compromised.