Product
Workspace Admin
Google Workspace administration: Cloud Identity, Chrome management and policy, Groups Settings, licensing, reports, alerts, Vault, reseller and Cloud Search admin.
Install
gadmin is one plugin in the google-services-mcps marketplace, and it runs one MCP server with the same name. Install it for Claude Code with the command below. For Codex, OpenCode or Antigravity, change --agent; the product id stays the same.
Install for Claude Code
npx google-services-mcps install --agent claude --plugin gadminWhat it manages
The server carries 12 generated API bindings and 4 gateway APIs. Gateway APIs are reached through api_search, api_describe and api_call, which every product with gateway APIs lists.
| API | Version |
|---|---|
| admin | datatransfer_v1 |
| admin | directory_v1 |
| admin | reports_v1 |
| alertcenter | v1beta1 |
| chromepolicy | v1 |
| cloudidentity | v1 |
| cloudsearch | v1 |
| groupssettings | v1 |
| licensing | v1 |
| reseller | v1 |
| vault | v1 |
| verifiedaccess | v2 |
| API | Version |
|---|---|
| chromemanagement | v1 |
| cloudidentity | v1beta1 |
| groupsmigration | v1 |
| verifiedaccess | v1 |
Tools
The plugin's server registers 368 tools: 153 reads, 133 writes, 81 destructive actions and 1 dynamic tools. A read never asks. A write is listed only when Allow write tools is on, and asks before it runs. A destructive action asks twice. A dynamic tool decides per call.
Every tool name starts with mcp__plugin_gadmin_gadmin__, so a call traces back to this product. The table lists the tools this server registers, with the safety class from the plugin's tool map.
| Tool | Class | What it does |
|---|---|---|
| adm_list | read | directory.orgunits.list |
| admi_chromeos_count_chrome_os_devices | read | admin.customer.devices.chromeos.countChromeOsDevices |
| admi_list | read | directory.groups.list |
| admi_users_list | read | directory.users.list |
| admin_activities_list | read | reports.activities.list |
| admin_activities_watch | write | reports.activities.watch |
| admin_applications_get | read | datatransfer.applications.get |
| admin_applications_list | read | datatransfer.applications.list |
| admin_asps_delete | destructive | directory.asps.delete |
| admin_asps_get | read | directory.asps.get |
| admin_asps_list | read | directory.asps.list |
| admin_batch_create_print_servers | write | admin.customers.chrome.printServers.batchCreatePrintServers |
| admin_batch_delete_print_servers | write | admin.customers.chrome.printServers.batchDeletePrintServers |
| admin_channels_stop | destructive | admin.channels.stop |
| admin_channels_stop_2 | destructive | admin.channels.stop |
| admin_chrome_print_servers_create | write | admin.customers.chrome.printServers.create |
| admin_chrome_print_servers_delete | destructive | admin.customers.chrome.printServers.delete |
| admin_chrome_print_servers_get | read | admin.customers.chrome.printServers.get |
| admin_chrome_print_servers_list | read | admin.customers.chrome.printServers.list |
| admin_chrome_print_servers_patch | write | admin.customers.chrome.printServers.patch |
| admin_chrome_printers_create | write | admin.customers.chrome.printers.create |
| admin_chrome_printers_delete | destructive | admin.customers.chrome.printers.delete |
| admin_chromeos_batch_change_status | destructive | admin.customer.devices.chromeos.batchChangeStatus |
| admin_chromeosdevices_action | destructive | directory.chromeosdevices.action |
| admin_chromeosdevices_get | read | directory.chromeosdevices.get |
| admin_chromeosdevices_list | read | directory.chromeosdevices.list |
| admin_chromeosdevices_patch | write | directory.chromeosdevices.patch |
| admin_chromeosdevices_update | write | directory.chromeosdevices.update |
| admin_customer_usage_reports_get | read | reports.customerUsageReports.get |
| admin_customers_chrome_printers_get | read | admin.customers.chrome.printers.get |
| admin_customers_chrome_printers_list | read | admin.customers.chrome.printers.list |
| admin_customers_chrome_printers_patch | write | admin.customers.chrome.printers.patch |
| admin_customers_get | read | directory.customers.get |
| admin_customers_patch | write | directory.customers.patch |
| admin_customers_update | write | directory.customers.update |
| admin_devices_chromeos_commands_get | read | admin.customer.devices.chromeos.commands.get |
| admin_devices_chromeos_issue_command | destructive | admin.customer.devices.chromeos.issueCommand |
| admin_domain_aliases_delete | destructive | directory.domainAliases.delete |
| admin_domain_aliases_get | read | directory.domainAliases.get |
| admin_domain_aliases_insert | write | directory.domainAliases.insert |
| admin_domain_aliases_list | read | directory.domainAliases.list |
| admin_domains_delete | destructive | directory.domains.delete |
| admin_domains_get | read | directory.domains.get |
| admin_domains_insert | write | directory.domains.insert |
| admin_domains_list | read | List domains |
| admin_entity_usage_reports_get | read | reports.entityUsageReports.get |
| admin_group_create | write | Create group |
| admin_group_delete | destructive | Delete group |
| admin_group_get | read | Get group |
| admin_group_member_add | write | Add group member |
| admin_group_members_list | read | List group members |
| admin_groups_aliases_delete | destructive | directory.groups.aliases.delete |
| admin_groups_aliases_insert | write | directory.groups.aliases.insert |
| admin_groups_aliases_list | read | directory.groups.aliases.list |
| admin_groups_delete | destructive | directory.groups.delete |
| admin_groups_get | read | directory.groups.get |
| admin_groups_insert | write | directory.groups.insert |
| admin_groups_list | read | List groups |
| admin_groups_patch | write | directory.groups.patch |
| admin_groups_update | write | directory.groups.update |
| admin_list | read | directory.domains.list |
| admin_member_remove | destructive | Remove group member |
| admin_members_delete | destructive | directory.members.delete |
| admin_members_get | read | directory.members.get |
| admin_members_has_member | read | directory.members.hasMember |
| admin_members_insert | write | directory.members.insert |
| admin_members_list | read | directory.members.list |
| admin_members_patch | write | directory.members.patch |
| admin_members_update | write | directory.members.update |
| admin_mobiledevices_action | destructive | directory.mobiledevices.action |
| admin_mobiledevices_delete | destructive | directory.mobiledevices.delete |
| admin_mobiledevices_get | read | directory.mobiledevices.get |
| admin_mobiledevices_list | read | directory.mobiledevices.list |
| admin_move_devices_to_ou | write | directory.chromeosdevices.moveDevicesToOu |
| admin_orgunit_create | write | Create org unit |
| admin_orgunit_delete | destructive | Delete org unit |
| admin_orgunit_get | read | Get org unit |
| admin_orgunit_update | write | Update org unit |
| admin_orgunits_delete | destructive | directory.orgunits.delete |
| admin_orgunits_get | read | directory.orgunits.get |
| admin_orgunits_insert | write | directory.orgunits.insert |
| admin_orgunits_list | read | List org units |
| admin_orgunits_patch | write | directory.orgunits.patch |
| admin_orgunits_update | write | directory.orgunits.update |
| admin_printers_batch_create_printers | write | admin.customers.chrome.printers.batchCreatePrinters |
| admin_printers_batch_delete_printers | write | admin.customers.chrome.printers.batchDeletePrinters |
| admin_printers_list_printer_models | read | admin.customers.chrome.printers.listPrinterModels |
| admin_privileges_list | read | directory.privileges.list |
| admin_resources_buildings_delete | destructive | directory.resources.buildings.delete |
| admin_resources_buildings_get | read | directory.resources.buildings.get |
| admin_resources_buildings_insert | write | directory.resources.buildings.insert |
| admin_resources_buildings_list | read | directory.resources.buildings.list |
| admin_resources_buildings_patch | write | directory.resources.buildings.patch |
| admin_resources_buildings_update | write | directory.resources.buildings.update |
| admin_resources_calendars_delete | destructive | directory.resources.calendars.delete |
| admin_resources_calendars_get | read | directory.resources.calendars.get |
| admin_resources_calendars_insert | write | directory.resources.calendars.insert |
| admin_resources_calendars_list | read | directory.resources.calendars.list |
| admin_resources_calendars_patch | write | directory.resources.calendars.patch |
| admin_resources_calendars_update | write | directory.resources.calendars.update |
| admin_resources_features_delete | destructive | directory.resources.features.delete |
| admin_resources_features_get | read | directory.resources.features.get |
| admin_resources_features_insert | write | directory.resources.features.insert |
| admin_resources_features_list | read | directory.resources.features.list |
| admin_resources_features_patch | write | directory.resources.features.patch |
| admin_resources_features_rename | write | directory.resources.features.rename |
| admin_resources_features_update | write | directory.resources.features.update |
| admin_role_assignments_delete | destructive | directory.roleAssignments.delete |
| admin_role_assignments_get | read | directory.roleAssignments.get |
| admin_role_assignments_insert | destructive | directory.roleAssignments.insert |
| admin_role_assignments_list | read | directory.roleAssignments.list |
| admin_roles_delete | destructive | directory.roles.delete |
| admin_roles_get | read | directory.roles.get |
| admin_roles_insert | destructive | directory.roles.insert |
| admin_roles_list | read | directory.roles.list |
| admin_roles_patch | destructive | directory.roles.patch |
| admin_roles_update | destructive | directory.roles.update |
| admin_schemas_delete | destructive | directory.schemas.delete |
| admin_schemas_get | read | directory.schemas.get |
| admin_schemas_insert | write | directory.schemas.insert |
| admin_schemas_list | read | directory.schemas.list |
| admin_schemas_patch | write | directory.schemas.patch |
| admin_schemas_update | write | directory.schemas.update |
| admin_tokens_delete | destructive | directory.tokens.delete |
| admin_tokens_get | read | directory.tokens.get |
| admin_tokens_list | read | directory.tokens.list |
| admin_transfers_get | read | datatransfer.transfers.get |
| admin_transfers_insert | destructive | datatransfer.transfers.insert |
| admin_transfers_list | read | datatransfer.transfers.list |
| admin_two_step_verification_turn_off | destructive | directory.twoStepVerification.turnOff |
| admin_user_create | write | Create user |
| admin_user_delete | destructive | Delete user |
| admin_user_get | read | Get user |
| admin_user_move_org_unit | write | Move user to org unit |
| admin_user_set_suspended | write | Suspend or restore user |
| admin_user_usage_report_get | read | reports.userUsageReport.get |
| admin_users_aliases_delete | destructive | directory.users.aliases.delete |
| admin_users_aliases_insert | write | directory.users.aliases.insert |
| admin_users_aliases_list | read | directory.users.aliases.list |
| admin_users_aliases_watch | write | directory.users.aliases.watch |
| admin_users_create_guest | write | directory.users.createGuest |
| admin_users_delete | destructive | directory.users.delete |
| admin_users_get | read | directory.users.get |
| admin_users_insert | write | directory.users.insert |
| admin_users_list | read | List users |
| admin_users_make_admin | destructive | directory.users.makeAdmin |
| admin_users_patch | write | directory.users.patch |
| admin_users_photos_delete | destructive | directory.users.photos.delete |
| admin_users_photos_get | read | directory.users.photos.get |
| admin_users_photos_patch | write | directory.users.photos.patch |
| admin_users_photos_update | write | directory.users.photos.update |
| admin_users_sign_out | write | directory.users.signOut |
| admin_users_undelete | write | directory.users.undelete |
| admin_users_update | write | directory.users.update |
| admin_users_watch | write | directory.users.watch |
| admin_verification_codes_generate | write | directory.verificationCodes.generate |
| admin_verification_codes_invalidate | write | directory.verificationCodes.invalidate |
| admin_verification_codes_list | write | directory.verificationCodes.list |
| alerts_alerts_batch_delete | destructive | alertcenter.alerts.batchDelete |
| alerts_alerts_batch_undelete | write | alertcenter.alerts.batchUndelete |
| alerts_alerts_delete | destructive | alertcenter.alerts.delete |
| alerts_alerts_feedback_create | write | alertcenter.alerts.feedback.create |
| alerts_alerts_feedback_list | read | alertcenter.alerts.feedback.list |
| alerts_alerts_get | read | alertcenter.alerts.get |
| alerts_alerts_get_metadata | read | alertcenter.alerts.getMetadata |
| alerts_alerts_list | read | alertcenter.alerts.list |
| alerts_alerts_undelete | write | alertcenter.alerts.undelete |
| alerts_v1beta1_get_settings | read | alertcenter.getSettings |
| alerts_v1beta1_update_settings | write | alertcenter.updateSettings |
| api_call | dynamic | Call an API method |
| api_describe | read | Describe an API method |
| api_methods | read | gadmin: API methods |
| api_search | read | Search API methods |
| auth_setup_admin | write | Set up the workspace admin account |
| chrome_update_group_priority_ordering | write | chromepolicy.customers.policies.groups.updateGroupPriorityOrdering |
| chromepo_list_group_priority_ordering | read | chromepolicy.customers.policies.groups.listGroupPriorityOrdering |
| chromepol_networks_define_certificate | write | chromepolicy.customers.policies.networks.defineCertificate |
| chromepol_networks_remove_certificate | write | chromepolicy.customers.policies.networks.removeCertificate |
| chromepoli_customers_policies_resolve | write | chromepolicy.customers.policies.resolve |
| chromepoli_groups_batch_delete | destructive | chromepolicy.customers.policies.groups.batchDelete |
| chromepoli_groups_batch_modify | write | chromepolicy.customers.policies.groups.batchModify |
| chromepoli_networks_define_network | write | chromepolicy.customers.policies.networks.defineNetwork |
| chromepoli_networks_remove_network | write | chromepolicy.customers.policies.networks.removeNetwork |
| chromepoli_orgunits_batch_inherit | write | chromepolicy.customers.policies.orgunits.batchInherit |
| chromepoli_orgunits_batch_modify | write | chromepolicy.customers.policies.orgunits.batchModify |
| chromepoli_policy_schemas_get | read | chromepolicy.customers.policySchemas.get |
| chromepoli_policy_schemas_list | read | chromepolicy.customers.policySchemas.list |
| clou_identitysources_unmappedids_list | read | cloudsearch.debug.identitysources.unmappedids.list |
| clou_inbound_saml_sso_profiles_create | destructive | cloudidentity.inboundSamlSsoProfiles.create |
| clou_inbound_saml_sso_profiles_delete | destructive | cloudidentity.inboundSamlSsoProfiles.delete |
| clou_memberships_get_membership_graph | read | cloudidentity.groups.memberships.getMembershipGraph |
| clou_memberships_search_direct_groups | read | cloudidentity.groups.memberships.searchDirectGroups |
| cloud_inbound_saml_sso_profiles_patch | destructive | cloudidentity.inboundSamlSsoProfiles.patch |
| cloudi_inbound_saml_sso_profiles_list | read | cloudidentity.inboundSamlSsoProfiles.list |
| cloudid_allowlisted_domains_create | write | cloudidentity.allowlistedDomains.create |
| cloudid_allowlisted_domains_delete | destructive | cloudidentity.allowlistedDomains.delete |
| cloudid_allowlisted_domains_get | read | cloudidentity.allowlistedDomains.get |
| cloudid_allowlisted_domains_list | read | cloudidentity.allowlistedDomains.list |
| cloudid_assignments_create | destructive | cloudidentity.inboundSsoAssignments.create |
| cloudid_assignments_delete | destructive | cloudidentity.inboundSsoAssignments.delete |
| cloudid_check_transitive_membership | read | cloudidentity.groups.memberships.checkTransitiveMembership |
| cloudid_customers_userinvitations_get | read | cloudidentity.customers.userinvitations.get |
| cloudid_devices_cancel_wipe | write | cloudidentity.devices.cancelWipe |
| cloudid_devices_create | write | cloudidentity.devices.create |
| cloudid_devices_delete | destructive | cloudidentity.devices.delete |
| cloudid_devices_device_users_approve | write | cloudidentity.devices.deviceUsers.approve |
| cloudid_devices_device_users_block | write | cloudidentity.devices.deviceUsers.block |
| cloudid_devices_device_users_delete | destructive | cloudidentity.devices.deviceUsers.delete |
| cloudid_devices_device_users_get | read | cloudidentity.devices.deviceUsers.get |
| cloudid_devices_device_users_list | read | cloudidentity.devices.deviceUsers.list |
| cloudid_devices_device_users_lookup | read | cloudidentity.devices.deviceUsers.lookup |
| cloudid_devices_device_users_wipe | destructive | cloudidentity.devices.deviceUsers.wipe |
| cloudid_devices_get | read | cloudidentity.devices.get |
| cloudid_devices_list | read | cloudidentity.devices.list |
| cloudid_devices_users_cancel_wipe | write | cloudidentity.devices.deviceUsers.cancelWipe |
| cloudid_devices_users_states_get | read | cloudidentity.devices.deviceUsers.clientStates.get |
| cloudid_devices_users_states_list | read | cloudidentity.devices.deviceUsers.clientStates.list |
| cloudid_devices_users_states_patch | write | cloudidentity.devices.deviceUsers.clientStates.patch |
| cloudid_devices_wipe | destructive | cloudidentity.devices.wipe |
| cloudid_groups_create | write | cloudidentity.groups.create |
| cloudid_groups_delete | destructive | cloudidentity.groups.delete |
| cloudid_groups_get | read | cloudidentity.groups.get |
| cloudid_groups_get_security_settings | read | cloudidentity.groups.getSecuritySettings |
| cloudid_groups_list | read | cloudidentity.groups.list |
| cloudid_groups_lookup | read | cloudidentity.groups.lookup |
| cloudid_groups_memberships_create | write | cloudidentity.groups.memberships.create |
| cloudid_groups_memberships_delete | destructive | cloudidentity.groups.memberships.delete |
| cloudid_groups_memberships_get | read | cloudidentity.groups.memberships.get |
| cloudid_groups_memberships_list | read | cloudidentity.groups.memberships.list |
| cloudid_groups_memberships_lookup | read | cloudidentity.groups.memberships.lookup |
| cloudid_groups_patch | write | cloudidentity.groups.patch |
| cloudid_groups_search | read | cloudidentity.groups.search |
| cloudid_inbound_oidc_sso_profiles_get | read | cloudidentity.inboundOidcSsoProfiles.get |
| cloudid_inbound_saml_sso_profiles_get | read | cloudidentity.inboundSamlSsoProfiles.get |
| cloudid_inbound_sso_assignments_get | read | cloudidentity.inboundSsoAssignments.get |
| cloudid_inbound_sso_assignments_list | read | cloudidentity.inboundSsoAssignments.list |
| cloudid_inbound_sso_assignments_patch | destructive | cloudidentity.inboundSsoAssignments.patch |
| cloudid_is_invitable_user | read | cloudidentity.customers.userinvitations.isInvitableUser |
| cloudid_modify_membership_roles | write | cloudidentity.groups.memberships.modifyMembershipRoles |
| cloudid_policies_create | write | cloudidentity.policies.create |
| cloudid_policies_delete | destructive | cloudidentity.policies.delete |
| cloudid_policies_get | read | cloudidentity.policies.get |
| cloudid_policies_list | read | cloudidentity.policies.list |
| cloudid_policies_patch | write | cloudidentity.policies.patch |
| cloudid_profiles_create | destructive | cloudidentity.inboundOidcSsoProfiles.create |
| cloudid_profiles_credentials_delete | destructive | cloudidentity.inboundSamlSsoProfiles.idpCredentials.delete |
| cloudid_profiles_delete | destructive | cloudidentity.inboundOidcSsoProfiles.delete |
| cloudid_profiles_idp_credentials_add | destructive | cloudidentity.inboundSamlSsoProfiles.idpCredentials.add |
| cloudid_profiles_idp_credentials_get | read | cloudidentity.inboundSamlSsoProfiles.idpCredentials.get |
| cloudid_profiles_idp_credentials_list | read | cloudidentity.inboundSamlSsoProfiles.idpCredentials.list |
| cloudid_profiles_list | read | cloudidentity.inboundOidcSsoProfiles.list |
| cloudid_profiles_patch | destructive | cloudidentity.inboundOidcSsoProfiles.patch |
| cloudid_search_transitive_groups | read | cloudidentity.groups.memberships.searchTransitiveGroups |
| cloudid_search_transitive_memberships | read | cloudidentity.groups.memberships.searchTransitiveMemberships |
| cloudid_update_security_settings | write | cloudidentity.groups.updateSecuritySettings |
| cloudid_userinvitations_cancel | destructive | cloudidentity.customers.userinvitations.cancel |
| cloudid_userinvitations_list | read | cloudidentity.customers.userinvitations.list |
| cloudid_userinvitations_send | destructive | cloudidentity.customers.userinvitations.send |
| clouds_datasources_items_check_access | read | cloudsearch.debug.datasources.items.checkAccess |
| clouds_items_list_forunmappedidentity | read | cloudsearch.debug.identitysources.items.listForunmappedidentity |
| clouds_session_searchapplications_get | read | cloudsearch.stats.session.searchapplications.get |
| cloudsea_query_searchapplications_get | read | cloudsearch.stats.query.searchapplications.get |
| cloudsear_datasources_items_unreserve | write | cloudsearch.indexing.datasources.items.unreserve |
| cloudsear_settings_datasources_create | write | cloudsearch.settings.datasources.create |
| cloudsear_settings_datasources_delete | destructive | cloudsearch.settings.datasources.delete |
| cloudsear_settings_datasources_update | write | cloudsearch.settings.datasources.update |
| cloudsear_stats_get_searchapplication | read | cloudsearch.stats.getSearchapplication |
| cloudsear_stats_index_datasources_get | read | cloudsearch.stats.index.datasources.get |
| cloudsear_user_searchapplications_get | read | cloudsearch.stats.user.searchapplications.get |
| cloudsearc_datasources_delete_schema | destructive | cloudsearch.indexing.datasources.deleteSchema |
| cloudsearc_datasources_get_schema | read | cloudsearch.indexing.datasources.getSchema |
| cloudsearc_datasources_items_delete | destructive | cloudsearch.indexing.datasources.items.delete |
| cloudsearc_datasources_items_get | read | cloudsearch.indexing.datasources.items.get |
| cloudsearc_datasources_items_index | write | cloudsearch.indexing.datasources.items.index |
| cloudsearc_datasources_items_list | read | cloudsearch.indexing.datasources.items.list |
| cloudsearc_datasources_items_poll | write | cloudsearch.indexing.datasources.items.poll |
| cloudsearc_datasources_items_push | write | cloudsearch.indexing.datasources.items.push |
| cloudsearc_datasources_items_upload | write | cloudsearch.indexing.datasources.items.upload |
| cloudsearc_datasources_update_schema | write | cloudsearch.indexing.datasources.updateSchema |
| cloudsearc_items_delete_queue_items | write | cloudsearch.indexing.datasources.items.deleteQueueItems |
| cloudsearc_items_search_by_view_url | read | cloudsearch.debug.datasources.items.searchByViewUrl |
| cloudsearc_items_unmappedids_list | read | cloudsearch.debug.datasources.items.unmappedids.list |
| cloudsearc_operations_get | read | cloudsearch.operations.get |
| cloudsearc_operations_lro_list | read | cloudsearch.operations.lro.list |
| cloudsearc_query_remove_activity | write | cloudsearch.query.removeActivity |
| cloudsearc_query_search | read | cloudsearch.query.search |
| cloudsearc_query_sources_list | read | cloudsearch.query.sources.list |
| cloudsearc_query_suggest | write | cloudsearch.query.suggest |
| cloudsearc_searchapplications_create | write | cloudsearch.settings.searchapplications.create |
| cloudsearc_searchapplications_delete | destructive | cloudsearch.settings.searchapplications.delete |
| cloudsearc_searchapplications_get | read | cloudsearch.settings.searchapplications.get |
| cloudsearc_searchapplications_list | read | cloudsearch.settings.searchapplications.list |
| cloudsearc_searchapplications_patch | write | cloudsearch.settings.searchapplications.patch |
| cloudsearc_searchapplications_reset | destructive | cloudsearch.settings.searchapplications.reset |
| cloudsearc_searchapplications_update | write | cloudsearch.settings.searchapplications.update |
| cloudsearc_settings_datasources_get | read | cloudsearch.settings.datasources.get |
| cloudsearc_settings_datasources_list | read | cloudsearch.settings.datasources.list |
| cloudsearc_settings_datasources_patch | write | cloudsearch.settings.datasources.patch |
| cloudsearc_settings_get_customer | read | cloudsearch.settings.getCustomer |
| cloudsearc_settings_update_customer | write | cloudsearch.settings.updateCustomer |
| cloudsearc_stats_get_index | read | cloudsearch.stats.getIndex |
| cloudsearc_stats_get_query | read | cloudsearch.stats.getQuery |
| cloudsearc_stats_get_session | read | cloudsearch.stats.getSession |
| cloudsearc_stats_get_user | read | cloudsearch.stats.getUser |
| cloudsearc_v1_initialize_customer | write | cloudsearch.initializeCustomer |
| groupset_groups_get | read | groupsSettings.groups.get |
| groupset_groups_patch | write | groupsSettings.groups.patch |
| groupset_groups_update | write | groupsSettings.groups.update |
| health | read | Server health |
| license_license_assignments_delete | destructive | licensing.licenseAssignments.delete |
| license_license_assignments_get | read | licensing.licenseAssignments.get |
| license_license_assignments_insert | write | licensing.licenseAssignments.insert |
| license_license_assignments_patch | write | licensing.licenseAssignments.patch |
| license_license_assignments_update | write | licensing.licenseAssignments.update |
| license_list_for_product | read | licensing.licenseAssignments.listForProduct |
| license_list_for_product_and_sku | read | licensing.licenseAssignments.listForProductAndSku |
| reseller_customers_get | read | reseller.customers.get |
| reseller_customers_insert | write | reseller.customers.insert |
| reseller_customers_patch | write | reseller.customers.patch |
| reseller_customers_update | write | reseller.customers.update |
| reseller_getwatchdetails | read | reseller.resellernotify.getwatchdetails |
| reseller_resellernotify_register | write | reseller.resellernotify.register |
| reseller_resellernotify_unregister | write | reseller.resellernotify.unregister |
| reseller_subs_change_renewal_settings | write | reseller.subscriptions.changeRenewalSettings |
| reseller_subs_start_paid_service | write | reseller.subscriptions.startPaidService |
| reseller_subscriptions_activate | write | reseller.subscriptions.activate |
| reseller_subscriptions_change_plan | write | reseller.subscriptions.changePlan |
| reseller_subscriptions_change_seats | destructive | reseller.subscriptions.changeSeats |
| reseller_subscriptions_delete | destructive | reseller.subscriptions.delete |
| reseller_subscriptions_get | read | reseller.subscriptions.get |
| reseller_subscriptions_insert | destructive | reseller.subscriptions.insert |
| reseller_subscriptions_list | read | reseller.subscriptions.list |
| reseller_subscriptions_suspend | destructive | reseller.subscriptions.suspend |
| vault_matters_add_permissions | write | vault.matters.addPermissions |
| vault_matters_close | destructive | vault.matters.close |
| vault_matters_count | write | vault.matters.count |
| vault_matters_create | write | vault.matters.create |
| vault_matters_delete | destructive | vault.matters.delete |
| vault_matters_exports_create | write | vault.matters.exports.create |
| vault_matters_exports_delete | destructive | vault.matters.exports.delete |
| vault_matters_exports_get | read | vault.matters.exports.get |
| vault_matters_exports_list | read | vault.matters.exports.list |
| vault_matters_get | read | vault.matters.get |
| vault_matters_holds_accounts_create | write | vault.matters.holds.accounts.create |
| vault_matters_holds_accounts_delete | destructive | vault.matters.holds.accounts.delete |
| vault_matters_holds_accounts_list | read | vault.matters.holds.accounts.list |
| vault_matters_holds_add_held_accounts | write | vault.matters.holds.addHeldAccounts |
| vault_matters_holds_create | write | vault.matters.holds.create |
| vault_matters_holds_delete | destructive | vault.matters.holds.delete |
| vault_matters_holds_get | read | vault.matters.holds.get |
| vault_matters_holds_list | read | vault.matters.holds.list |
| vault_matters_holds_remove_held_accts | destructive | vault.matters.holds.removeHeldAccounts |
| vault_matters_holds_update | write | vault.matters.holds.update |
| vault_matters_list | read | vault.matters.list |
| vault_matters_remove_permissions | destructive | vault.matters.removePermissions |
| vault_matters_reopen | write | vault.matters.reopen |
| vault_matters_saved_queries_create | write | vault.matters.savedQueries.create |
| vault_matters_saved_queries_delete | destructive | vault.matters.savedQueries.delete |
| vault_matters_saved_queries_get | read | vault.matters.savedQueries.get |
| vault_matters_saved_queries_list | read | vault.matters.savedQueries.list |
| vault_matters_undelete | write | vault.matters.undelete |
| vault_matters_update | write | vault.matters.update |
| vault_operations_cancel | destructive | vault.operations.cancel |
| vault_operations_delete | destructive | vault.operations.delete |
| vault_operations_get | read | vault.operations.get |
| vault_operations_list | read | vault.operations.list |
| verifiedac_challenge_generate | write | verifiedaccess.challenge.generate |
| verifiedac_challenge_verify | write | verifiedaccess.challenge.verify |
The plugin option toolset can list fewer tools. google lists 12 tools that do the same jobs as Google's official MCP server for this product; curated lists the hand-written and gateway tools; all is the default.
Sign-in
gadmin belongs to the workspace-admin login group. This group uses a service account with domain-wide delegation, not a user login. Create the service account and its JSON key, allow its client ID in the Google Admin console under Domain-wide delegation, then run npx google-services-mcps setup-admin.
The plugin's scope file lists 63 OAuth scopes for 1 APIs. A login asks only for the scopes of its profile: readonly (the default), readwrite, full, or an exact list.
| API | Scope |
|---|---|
| gadmin | https://www.googleapis.com/auth/admin.chrome.printers |
| gadmin | https://www.googleapis.com/auth/admin.chrome.printers.readonly |
| gadmin | https://www.googleapis.com/auth/admin.datatransfer |
| gadmin | https://www.googleapis.com/auth/admin.datatransfer.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.customer |
| gadmin | https://www.googleapis.com/auth/admin.directory.customer.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.device.chromeos |
| gadmin | https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.device.mobile |
| gadmin | https://www.googleapis.com/auth/admin.directory.device.mobile.action |
| gadmin | https://www.googleapis.com/auth/admin.directory.device.mobile.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.domain |
| gadmin | https://www.googleapis.com/auth/admin.directory.domain.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.group |
| gadmin | https://www.googleapis.com/auth/admin.directory.group.member |
| gadmin | https://www.googleapis.com/auth/admin.directory.group.member.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.group.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.orgunit |
| gadmin | https://www.googleapis.com/auth/admin.directory.orgunit.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.resource.calendar |
| gadmin | https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.rolemanagement |
| gadmin | https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.user |
| gadmin | https://www.googleapis.com/auth/admin.directory.user.alias |
| gadmin | https://www.googleapis.com/auth/admin.directory.user.alias.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.user.readonly |
| gadmin | https://www.googleapis.com/auth/admin.directory.user.security |
| gadmin | https://www.googleapis.com/auth/admin.directory.userschema |
| gadmin | https://www.googleapis.com/auth/admin.directory.userschema.readonly |
| gadmin | https://www.googleapis.com/auth/admin.reports.audit.readonly |
| gadmin | https://www.googleapis.com/auth/admin.reports.usage.readonly |
| gadmin | https://www.googleapis.com/auth/apps.alerts |
| gadmin | https://www.googleapis.com/auth/apps.groups.settings |
| gadmin | https://www.googleapis.com/auth/apps.licensing |
| gadmin | https://www.googleapis.com/auth/apps.order |
| gadmin | https://www.googleapis.com/auth/apps.order.readonly |
| gadmin | https://www.googleapis.com/auth/chrome.management.policy |
| gadmin | https://www.googleapis.com/auth/chrome.management.policy.readonly |
| gadmin | https://www.googleapis.com/auth/cloud-identity.allowlisteddomains |
| gadmin | https://www.googleapis.com/auth/cloud-identity.allowlisteddomains.readonly |
| gadmin | https://www.googleapis.com/auth/cloud-identity.devices |
| gadmin | https://www.googleapis.com/auth/cloud-identity.devices.lookup |
| gadmin | https://www.googleapis.com/auth/cloud-identity.devices.readonly |
| gadmin | https://www.googleapis.com/auth/cloud-identity.groups |
| gadmin | https://www.googleapis.com/auth/cloud-identity.groups.readonly |
| gadmin | https://www.googleapis.com/auth/cloud-identity.inboundsso |
| gadmin | https://www.googleapis.com/auth/cloud-identity.inboundsso.readonly |
| gadmin | https://www.googleapis.com/auth/cloud-identity.policies |
| gadmin | https://www.googleapis.com/auth/cloud-identity.policies.readonly |
| gadmin | https://www.googleapis.com/auth/cloud-platform |
| gadmin | https://www.googleapis.com/auth/cloud_search |
| gadmin | https://www.googleapis.com/auth/cloud_search.debug |
| gadmin | https://www.googleapis.com/auth/cloud_search.indexing |
| gadmin | https://www.googleapis.com/auth/cloud_search.query |
| gadmin | https://www.googleapis.com/auth/cloud_search.settings |
| gadmin | https://www.googleapis.com/auth/cloud_search.settings.indexing |
| gadmin | https://www.googleapis.com/auth/cloud_search.settings.query |
| gadmin | https://www.googleapis.com/auth/cloud_search.stats |
| gadmin | https://www.googleapis.com/auth/cloud_search.stats.indexing |
| gadmin | https://www.googleapis.com/auth/ediscovery |
| gadmin | https://www.googleapis.com/auth/ediscovery.readonly |
| gadmin | https://www.googleapis.com/auth/verifiedaccess |
Plugin details
- Plugin
- gadmin
- MCP server
- gadmin
- Display name
- Workspace Admin
- Version
- 2.17.0
- Marketplace
- google-services-mcps
- Login group
- workspace-admin
- Marketplace category
- administration
- Plugin options
- admin_subject, allow_writes, confirmation, service_account_key_file, token_dir, toolset
- Server kind
- curated+discovery