MCP.Market

gws-admin-mcp server

by antct11·io.github.antct11/gws-admin-mcp·v0.3.0
No reviews yet

Safe Google Workspace admin for AI agents: read-only by default, confirm-gated deletes, audit log.

B70/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B70/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed gws-admin-mcp yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

gws-admin-mcp tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualityno auth information5/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 70/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How gws-admin-mcp compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
70/100
higher than 35% of 48,255 servers

Install gws-admin-mcp in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the gws-admin-mcp repository's README, as published. We do not edit it. Read it on GitHub

gws-admin-mcp

A local Model Context Protocol (MCP) server that gives your AI agent (Cursor, Claude Desktop, or any MCP client) a safe Google Workspace admin console. It talks to the Admin SDK (Directory, Reports, Groups Settings) through a service account with domain-wide delegation, so the agent can answer questions like "which users haven't logged in for 90 days?" or "who is in the Finance group?" — and, only when you explicitly allow it, make changes.

MCP client ──stdio──► gws-admin-mcp ──service account JWT (impersonates an admin)──► admin.googleapis.com / groupssettings.googleapis.com

Runs entirely on your machine. No third-party service, no telemetry, no data leaves your laptop except the Google API calls themselves.

Safety model

This server assumes the agent driving it is fallible. Three layers:

registered — write tools are not hidden behind a runtime check, they simply do not exist in the tool list, so the agent cannot call them. Mutations require starting the server with --allow-write (or GWSADMINALLOW_WRITE=1).

  1. Read-only by default. Out of the box only the 17 read tools are

irreversible operations — usersdelete, groupsdelete, orgunitsdelete, roleassignmentdelete, mobile device wipe actions, and ChromeOS deprovision* — are refused unless the call includes "confirm": true. The agent has to make the destructive intent explicit a second time.

  1. Confirm gate on destructive calls. Even with writes enabled, the

~/.config/gws-admin-mcp/audit.log (mode 600), with passwords and secrets redacted. Disable with GWSADMINAUDIT=0 if you must.

  1. Audit log. Every tool call is appended as JSON lines to

Recommended pattern: run the read-only instance permanently, and start a second, write-enabled instance only for the duration of a change window.

Tools (40 total; 17 in read-only mode)

\* Destructive — additionally requires "confirm": true in the call (device tools only for wipe/deprovision actions).

List tools auto-paginate up to a maxResults cap, and userslist supports the full Admin SDK search syntax (orgUnitPath='/Sales', isAdmin=true, email:jdoe, ...).

Requirements

delegation)

  • Node.js >= 20
  • Super-admin access to a Google Workspace domain (to grant domain-wide
  • A Google Cloud project (free — the Admin SDK has no usage cost)

Google Cloud setup

You need a service account whose key the server uses to impersonate a Workspace super-admin. Two paths:

Path A — scripted (needs gcloud)

gcloud auth login admin@yourdomain.com
scripts/setup-service-account.sh admin@yourdomain.com your-project-id

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

gws-admin-mcp: common questions

Is gws-admin-mcp server safe?
Mostly: it is graded B (70/100). Read the gws-admin-mcp safety report
Does gws-admin-mcp need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is gws-admin-mcp maintained?
The last commit was 42 days ago (2026-09-23). The latest release is v0.3.0.
What can I use instead of gws-admin-mcp?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.

Alternatives to gws-admin-mcp

Same job from other publishers: the closest match first, then the best rated.