Most Workspace servers assume a person is present to complete a browser sign-in. This one takes a service-account key on the command line instead, which is what a scheduled job or a server-side agent needs. The flip side of one binary covering seven services is scope: the OAuth consent you grant covers everything you enabled, so grant only the APIs you actually intend it to touch.
A single Go binary that exposes seven Google Workspace services through one MCP server. Rather than running a separate server per service, you install one command and it covers mail, files, calendar, spreadsheets, documents, contacts and tasks.
- Gmail — search and list threads, read full conversations, create drafts, send, and move to trash
- Drive — search, read text content, create files and folders, update content, move, share and trash
- Calendar — list upcoming events, create meetings with attendees, delete events
- Sheets — create spreadsheets, read ranges, append rows, update specific cells
- Docs — create new documents and read full document text
- People — list contacts and create new connections
- Tasks — list task lists and tasks, create, update and delete, with optional status or due-date filtering
Go 1.24 or later, then `go install github.com/matheusbuniotto/go-google-mcp/cmd/go-google-mcp@latest`. Two authentication paths. For personal use, create a Desktop App OAuth client in Google Cloud, save it as `client_secrets.json`, and run `go-google-mcp auth login --secrets path/to/client_secrets.json` once — the token is stored in `~/.go-google-mcp/`. For server or automated use, download a service-account key and pass `-creds path/to/service-account.json`. Enable the APIs you intend to use (Drive, Gmail and so on) in the same Google Cloud project. Clients launch it as `go-google-mcp` with no arguments.
One command plus a key — go install github.com/matheusbuniotto/go-google-mcp/cmd/go-google-mcp@latest, then supply credentials