Google Workspace Admin Security-Audit MCP server

Read from the package source without running it. The installed server may list more.

• admin_actions

  What administrators did in the Admin console: to one account or group, or tenant-wide.

• compromise_sweep
• daily_brief

  One-call security summary across all configured domains.

• daily_brief_result

  Fetch a ``daily_brief_start`` job by id.

• daily_brief_start

  Start a daily_brief in the background; returns immediately with a ``job_id``.

• dmarc_rua_summary
• drive_doc_activity

  Full audit history of one Drive document: owner, ACL changes, lifecycle.

• drive_external_sharing
• get_user

  Look up ONE named account's current state — the "why can't this person sign in" tool.

• gmail_message_trace

  Check whether a message (by RFC 822 Message-ID) reached specific users' mailboxes.

• gmail_usage_report

  Daily Gmail send/receive counts per domain (Admin SDK customerUsageReports).

• group_delivery_policy

  Check a Google Group's own posting/delivery policy — why an external sender's mail never arrived.

• health_check

  Report service status, version, and per-domain auth/API reachability.

• ip_activity

  Every account ONE source address acted as, across applications and domains.

• list_group_members

  List a Google Group's basic metadata and member roster (Directory API).

• login_audit

  Audit the login log: Google-auto-disabled accounts, suspicious logins, failure top-N.

• shared_drive_membership_changes

  Membership add/remove/role-change history across shared drives.

• suspended_accounts

  Snapshot of currently suspended Google Workspace accounts, per domain.

• user_activity
• user_oauth_tokens

  List third-party OAuth apps one user has granted account access to.

• workspace_status

  Is a Google Workspace service down? Open and recent incidents from Google's status dashboard.

• Code scan8 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 0 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

92/100

higher than 95% of 915 Security servers

Tools

21

the typical Security server has 6

Tools that change things

0%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

608

more than 91% of 248 Security servers with a package

Google Workspace Admin Security-Audit MCP: common questions

Is Google Workspace Admin Security-Audit MCP server safe?

Yes, by our scan: it is graded A (92/100). Read the Google Workspace Admin Security-Audit MCP safety report

How do I install Google Workspace Admin Security-Audit MCP?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Google Workspace Admin Security-Audit MCP need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Google Workspace Admin Security-Audit MCP maintained?

The last commit was 8 days ago (2026-10-27). The latest release is v0.23.1.

What can I use instead of Google Workspace Admin Security-Audit MCP?

Servers from other publishers that do the same job: Wireshark MCP server, Mastyf AI MCP server and Guardvibe MCP server. Compare all Google Workspace Admin Security-Audit MCP alternatives.

How does Google Workspace Admin Security-Audit MCP compare with other Security MCP servers?

safety score 92/100 (higher than 95% of 915 Security servers); tools 21 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.