by piotr-agier
A Model Context Protocol (MCP) server that provides secure integration with Google Drive, Docs, Sheets, Slides and Calendar. It allows Claude Desktop and other MCP clients to manage files in Google Drive through a standardized interface.
# Add to your Claude Code skills
git clone https://github.com/piotr-agier/google-drive-mcpGuides for using mcp servers skills like google-drive-mcp.
Last scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "flatted: Prototype Pollution via parse() in NodeJS flatted",
"severity": "high"
},
{
"type": "npm-audit",
"message": "gaxios: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "googleapis: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "googleapis-common: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "hono: Hono missing validation of cookie name on write path in setCookie()",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Denial of Service via sequential optional groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-05-30T16:01:18.241Z",
"npmAuditRan": true,
"pipAuditRan": true
}google-drive-mcp is an open-source mcp servers skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by piotr-agier. A Model Context Protocol (MCP) server that provides secure integration with Google Drive, Docs, Sheets, Slides and Calendar. It allows Claude Desktop and other MCP clients to manage files in Google Drive through a standardized interface. It has 204 GitHub stars.
google-drive-mcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/piotr-agier/google-drive-mcp" and add it to your Claude Code skills directory (see the Installation section above).
google-drive-mcp is primarily written in TypeScript. It is open-source under piotr-agier on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other MCP Servers skills you can browse and compare side by side. Open the MCP Servers category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh google-drive-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Connect an MCP client to Google Drive, Docs, Sheets, Slides, and Calendar through one self-hosted server. Search and organize files, create and edit Workspace content, manage sharing, and automate multi-step workflows while keeping control of the Google identity and credentials used for every call.
gdrive:/// resource interface supports direct reading and discovery.This project remains focused on deep Drive and editor workflows rather than attempting to expose every Google Workspace API.
Compatibility is determined by the transport and authentication flow a client supports.
| Client type | Transport | Recommended mode |
|---|---|---|
| Claude Desktop | stdio | Local OAuth |
| Other local MCP clients, including Gemini CLI | stdio | Local OAuth |
| claude.ai custom connectors | Streamable HTTP | Team mode |
| Other remote MCP clients | Streamable HTTP | Single identity behind access control, or team mode with OAuth 2.1 |
See Client configuration for configuration examples and transport requirements.
In a Google Cloud project:
~/.config/google-drive-mcp/gcp-oauth.keys.json
The setup guide has the complete Google Cloud walkthrough and alternative credential locations.
npx -y @piotr-agier/google-drive-mcp auth
Complete the Google consent flow in the browser. Tokens are stored by default at ~/.config/google-drive-mcp/tokens.json.
For clients that use the common mcpServers configuration shape:
{
"mcpServers": {
"google-drive": {
"command": "npx",
"args": ["-y", "@piotr-agier/google-drive-mcp"]
}
}
}
Restart the client after saving its configuration. Claude Desktop paths and HTTP examples are documented in Client configuration.
Ask your client:
Run authGetStatus and tell me which Google account is active.
Then try a read-only Drive request:
Search my Google Drive for files modified in the last seven days.
If the identity is wrong or search returns no files, use the troubleshooting guide.
Find PDF files in /Reports, create an Archive folder there, and move files older
than one year into it.
Create a Google Sheet for monthly results, summarize it in a Google Doc, and
create a short Google Slides presentation from the summary.
Find the "Project Plan" document, replace the old launch date, format the new
date in bold, and add a comment describing the change.
Create a Calendar event with a Google Meet link and attach the project brief
from Drive.
Every section that used to live in this README is now in one of these guides.
| Guide | Contents |
|---|---|
| Setup | Requirements, Google Cloud APIs, OAuth credentials, and installation |
| Client configuration | Supported transports and client configuration |
| Authentication | Local OAuth, multi-account, service accounts, external tokens, and scopes |
| Configuration | CLI flags, environment variables, defaults, and precedence |
| Deployment | Docker, Streamable HTTP, team mode, and reverse-proxy security |
| Tool reference | All Drive, Docs, Sheets, Slides, Calendar, and account tools |
| Troubleshooting | Authentication, API, identity, Docker, and rate-limit problems |
| Development | Repository structure, build commands, tests, and contributions |
tokens.json.127.0.0.1 unless the server is protected by TLS and access control.team-store.json as a secret because it contains members' Google refresh tokens.See Authentication and Deployment for the complete security and identity model.
See the development guide to build and test the project.