Google Admin MCP Server

A FastMCP server for managing Google Workspace users through the Admin Directory API.

Features

• List users in a domain
• Create new users with secure random passwords
• Get detailed user information
• Suspend and unsuspend users

Available Tools

listUsers

Lists users in a domain.

{
  "domain": "yourdomain.com"
}

addUser

Creates a new user with a secure random password.

{
  "primaryEmail": "user@yourdomain.com",
  "firstName": "First",
  "lastName": "Last"
}

getUser

Gets detailed information about a specific user.

{
  "userKey": "user@yourdomain.com"
}

suspendUser

Suspends a user account.

{
  "userKey": "user@yourdomain.com"
}

unsuspendUser

Unsuspends a user account.

{
  "userKey": "user@yourdomain.com"
}

Security Notes

• All users created will be required to change their password on first login
• Passwords are generated securely with:
  • Minimum 12 characters
  • Uppercase and lowercase letters
  • Numbers
  • Special characters
• The server requires a valid OAuth2 token with appropriate Admin Directory API scopes

Error Handling

The server provides clear error messages for:

• Authentication failures
• Invalid parameters
• API errors
• Missing environment variables

Prerequisites

• Docker
• Google Workspace Admin account
• Google Admin Directory API enabled
• Base64 encoded OAuth2 token in GOOGLE_TOKEN_JSON environment variable

Installation

1. Clone the repository
2. Build the Docker image:

docker build -t google-admin-mcp .

Running the Server

Run the container:

docker run -e GOOGLE_TOKEN_JSON="your_base64_encoded_token" google-admin-mcp

License

MIT License