Google Admin MCP server

Connect Google Admin to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Google Admin MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the create user tool in Google Admin
  • Use the transfer data tool in Google Admin
  • Use the manage org units tool in Google Admin
  • Use the manage domains tool in Google Admin
  • Use the get activity reports tool in Google Admin
  • Use the manage mobile devices tool in Google Admin

How teams use Google Admin with agents

Google Admin is the Workspace control panel. Through the integration, IT can hand routine directory work to an agent: onboarding users, changing group membership, moving org units and pulling audit reports.

Onboarding

Create a user, place them in the right org unit, add them to groups and assign a licence in one request.

Offboarding

Suspend an account, transfer the person's Drive and Calendar data to their manager, and remove group access.

Access reviews

List members of sensitive groups and check group settings such as who can post or join.

Activity reports

Pull login and admin activity reports for a security review or an incident.

Tools to start with

  • Transfer Data: Moves a leaver's Drive and Calendar data to someone else.
  • Manage Group Members: Adds or removes members in bulk.
  • Get Activity Reports: Audit logs for logins, admin changes and Drive.

Sign-in and permissions

Google Admin connects with Google OAuth, and the signed-in person must be a Workspace administrator with the matching admin privileges. The agent can't do more than that admin role allows.

Sign-in options on Metorial: Google OAuth 2.0.

Supported Tools

create_user

Create User

Create a new user account in the Google Workspace domain. Requires a primary email, first name, last name, and password. Optionally configure organizational unit, contact info, and account settings.

transfer_data

Transfer Data

Transfer ownership of application data (Drive files, Calendar, etc.) from one user to another. Typically used during employee offboarding. Can also list available applications and check transfer status.

manage_org_units

Manage Org Units

List, create, update, or delete organizational units (OUs) in the Google Workspace hierarchy. OUs are used to apply policies and configurations to subsets of users and devices.

manage_domains

Manage Domains

List, get, add, or delete domains associated with the Google Workspace account. Allows viewing domain verification status and managing secondary domains.

get_activity_reports

Get Activity Reports

Retrieve audit activity logs for admin actions, user logins, Drive activity, and other application events. Supports filtering by event type, time range, user, and IP address.

manage_mobile_devices

Manage Mobile Devices

List, get, perform actions on, or delete mobile devices. Supports searching and remote actions like approve, block, wipe, and account wipe.

manage_chromeos_devices

Manage ChromeOS Devices

List, get, update, or perform actions on ChromeOS devices. Supports searching, moving between org units, and remote actions like disable or deprovision.

delete_user

Delete User

Delete a user account from the Google Workspace domain. Deleted users can be restored within 20 days. Also supports restoring (undeleting) a previously deleted user.

get_user

Get User

Retrieve detailed information about a specific user by their email address or unique user ID. Returns full profile data including contact info, organization details, and account status.

get_customer_info

Get Customer Info

Retrieve Google Workspace customer account information including the primary domain, customer ID, language, postal address, and admin contact details.

list_groups

List Groups

Search and list groups in the Google Workspace domain. Can filter by domain, member, or search query. Returns group details with pagination support.

manage_group_members

Manage Group Members

List, add, update, or remove members from a Google Workspace group. Supports managing member roles (OWNER, MANAGER, MEMBER) and filtering by role.

list_users

List Users

Search and list user accounts in the Google Workspace domain. Supports filtering by query, domain, and org unit. Returns paginated results with user profile details.

manage_group

Manage Group

Create, update, or delete a Google Workspace group. Groups can be used for email distribution, collaboration, and access control. Supports updating group name, description, and email.

manage_roles

Manage Roles

List, create, or delete admin roles, and manage role assignments. Roles define sets of admin privileges that can be assigned to users for delegated administration.

manage_licenses

Manage Licenses

Assign, get, or revoke Google Workspace product licenses for users. Supports managing licenses for products like Google Workspace Business, Enterprise, and other Google products.

get_usage_reports

Get Usage Reports

Retrieve usage reports at the customer or user level. Shows application adoption, usage statistics, and account activity metrics for a specific date.

update_user

Update User

Update an existing user's profile, account settings, admin status, or organizational unit. Can also suspend/unsuspend users and manage admin privileges.

manage_calendar_resources

Manage Calendar Resources

List, create, update, or delete calendar resources like meeting rooms and equipment. These resources appear in Google Calendar for booking.

manage_user_aliases

Manage User Aliases

List, add, or remove email aliases for a user. Aliases allow users to send and receive email from additional addresses within the domain.

get_group_settings

Get Group Settings

Read a Google Workspace group's access, posting, and moderation settings by its email address.

update_group_settings

Update Group Settings

Change selected access, posting, or moderation settings of an existing Google Workspace group.

Connect Google Admin to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Google Admin in Metorial. In your Metorial portal, enable the Google Admin MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Google Admin tools.

Run Google Admin through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Google Admin and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Google Admin tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Google Admin

Google Sheets

Create, read, and update spreadsheets and their cell data. Read and write values to individual cells, ranges, or multiple ranges using A1 notation or named ranges. Apply cell formatting including text styles, backgrounds, borders, number formats, and conditional formatting. Manage sheets (tabs) within a spreadsheet—add, delete, copy, rename, and reorder them. Create and manage embedded charts, pivot tables, filter views, data validation rules, protected ranges, named ranges, and merged cells. Perform batch operations to apply multiple updates atomically.

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Google Drive

Upload, download, create, copy, move, rename, trash, and permanently delete files and folders in Google Drive. Search for files using complex queries filtering by name, MIME type, owner, modification date, labels, and other metadata. Share files and folders with specific users, groups, or domains with role-based permissions (owner, writer, commenter, reader). Manage shared drives and their members. Export Google Workspace files (Docs, Sheets, Slides) to standard formats like PDF, DOCX, and XLSX. Track file revision history and restore earlier versions. Create, read, update, and delete threaded comments and replies on files. Read label definitions and search files by label. Browse the Drive apps installed for your account. Store app-specific data in a hidden per-user folder.

Technical notes for Google Admin

Manage Google Workspace organizations programmatically. Create, update, delete, and search users, groups, and organizational units. Manage user aliases, group memberships, and group settings. Assign and revoke admin roles and privileges. Manage ChromeOS and mobile devices including remote actions like wipe and deprovision. Add and manage domains and domain aliases. Assign, update, and revoke product licenses. Access audit logs and usage reports for admin actions, logins, Drive activity, and device events. Monitor and respond to security alerts for phishing, malware, and suspicious activity. Transfer data ownership between users. Manage calendar resources such as meeting rooms and equipment. Configure SSO and email routing settings. Manage Chrome printers and shared contacts.

Frequently asked questions

Common questions about connecting Google Admin to AI agents with Metorial.

  1. How many tools does the Google Admin MCP server have?
    The Google Admin MCP server exposes 22 tools, including Create User, Transfer Data, Manage Org Units. Each one is governed and traced through Metorial.
  2. Google Admin exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Google Admin MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Google Admin and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Google Admin MCP server yourself or use the hosted gateway.

Connect Google Admin to production AI agents

See how Metorial gives your team governed access to Google Admin, with tracing and security controls built in.