Google Workspace Auth

What it does

When your agent uses it

• Tasks that involve Cloud office suites
• Tasks that involve OAuth and OpenID Connect

Example prompts

• “/google-workspace-auth”

Requirements

• A credential in GOOGLE_OAUTH_CLIENT_SECRET
• Compatibility (from SKILL.md): claude-code

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

1. 1.env.local (highest priority)
2. 2.env
3. 3Environment variables

What it can do on your machine

Read from SKILL.md and the folder at commit 25203d3. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  Links to these hosts (documentation or services it may open):

  • console.cloud.google.com

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names these keys or tokens, usually read from environment variables:

  • GOOGLE_OAUTH_CLIENT_SECRET

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

• Compatibility

  claude-code

  From compatibility in the SKILL.md frontmatter.

Context cost

Google Workspace Auth loads about 718 tokens when it runs. Until then it costs about 28 tokens; SKILL.md has 146 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~28

When it runs · the whole SKILL.md, loaded when a task matches

~718

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteMentions a .env fileSKILL.md:49

  1. `.env.local` (highest priority)

• NoteMentions a .env fileSKILL.md:50

  2. `.env`

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from bobmatnyc/claude-mpm at commit 25203d3, republished under its MIT licence (© bobmatnyc). 146 words, ~718 tokens.

name

google-workspace-auth

description

Re-authenticate Google Workspace MCP in-flight - refresh tokens, setup OAuth, check status

compatibility

claude-code

license

MIT

metadata.version

1.0.0

metadata.category

mpm

metadata.author

Claude MPM Team

tags

google, oauth, gmail, calendar, drive, docs, tasks, authentication, mcp

claude-mpm oauth status google-workspace-mcp

claude-mpm oauth refresh google-workspace-mcp

# Opens browser for full OAuth flow
claude-mpm oauth setup google-workspace-mcp --no-launch

# If credentials need to be re-entered
claude-mpm oauth setup google-workspace-mcp --force --no-launch

claude-mpm oauth revoke google-workspace-mcp

# Required environment variables
GOOGLE_OAUTH_CLIENT_ID="your-client-id.apps.googleusercontent.com"
GOOGLE_OAUTH_CLIENT_SECRET="your-client-secret"

# Try refresh first (faster, doesn't need browser)
claude-mpm oauth refresh google-workspace-mcp

# If refresh fails, do full re-auth
claude-mpm oauth setup google-workspace-mcp --no-launch

# Force credential prompt
claude-mpm oauth setup google-workspace-mcp --force --no-launch

claude-mpm oauth list

© bobmatnyc, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in plugin/skills/google-workspace-auth of bobmatnyc/claude-mpm.

• SKILL.md
• metadata.json

Open the folder on GitHubat commit 25203d3