google-admin-mcp

google-admin-mcp

0
cloud_platformssecurity

Google Admin MCP Server is a tool that helps manage Google Workspace users using the Admin Directory API. It provides features to list, create, suspend, and unsuspend users with a focus on security and user account management.

Google Admin MCP Server

A FastMCP server for managing Google Workspace users through the Admin Directory API.

Features

  • List users in a domain
  • Create new users with secure random passwords
  • Get detailed user information
  • Suspend and unsuspend users

Prerequisites

  • Docker
  • Google Workspace Admin account
  • Google Admin Directory API enabled
  • Base64 encoded OAuth2 token in GOOGLE_TOKEN_JSON environment variable

Installation

  1. Clone the repository
  2. Build the Docker image:
docker build -t google-admin-mcp .

Running the Server

Run the container:

docker run -e GOOGLE_TOKEN_JSON="your_base64_encoded_token" google-admin-mcp

Available Tools

listUsers

Lists users in a domain.

{
  "domain": "yourdomain.com"
}

addUser

Creates a new user with a secure random password.

{
  "primaryEmail": "user@yourdomain.com",
  "firstName": "First",
  "lastName": "Last"
}

getUser

Gets detailed information about a specific user.

{
  "userKey": "user@yourdomain.com"
}

suspendUser

Suspends a user account.

{
  "userKey": "user@yourdomain.com"
}

unsuspendUser

Unsuspends a user account.

{
  "userKey": "user@yourdomain.com"
}

Security Notes

  • All users created will be required to change their password on first login
  • Passwords are generated securely with:
    • Minimum 12 characters
    • Uppercase and lowercase letters
    • Numbers
    • Special characters
  • The server requires a valid OAuth2 token with appropriate Admin Directory API scopes

Error Handling

The server provides clear error messages for:

  • Authentication failures
  • Invalid parameters
  • API errors
  • Missing environment variables

License

MIT License