Google Admin for Workspace logo

Google Admin for Workspace

by Suresh SarakUpdated Aug 3, 2026

Multi-Tenant SaaS MCP Server for Google Admin Directory - 1) Enables multi-account management for users, devices, security, and workspace settings across multiple Google Workspace tenants. 2) Empowers AI assistants (Claude, Gemini, Antigravity) to manage users, device security policies, SKUs, and domain configurations via the Google Admin Directory API.

workspace
google admin
google workspace
|

How to pay

Subscribe

Monthly billing

$10/month

Predictable monthly cost with included usage. Best for steady, high-volume traffic.

  • Unlimited tools within plan limits
  • One API key, billed once a month
  • Cancel any time
See plans

Overview

Google Admin MCP for Workspace is an enterprise-grade Model Context Protocol (MCP) server that empowers AI assistants and autonomous workflows to manage Google Workspace organizations securely. Built on a multi-tenant SaaS architecture, it provides complete isolation of OAuth tokens and tenant environments while exposing 90+ administration capabilities directly to LLM clients like Claude Desktop, Gemini, Cursor, and Antigravity CLI.

šŸš€ Key Capabilities

šŸ‘¤ User Lifecycle Management

  • Full User CRUD: Create, retrieve, update, suspend, restore, and delete workspace users.
  • Data Wipe & Security Reset: Execute remote data wipe on compromised accounts, clear active sessions, and reset credentials securely.
  • User Search & Filters: Search accounts across organizational units (OUs), domains, and status.

šŸ”’ Security & Access Control

  • Two-Factor Authentication (2FA): Monitor 2FA enforcement status and reset 2FA backup codes.
  • Application Passwords: Audit and revoke user application-specific passwords.
  • Admin Roles: Assign and revoke administrative roles and custom privileges across your domain.

šŸ“± Device & Resource Management

  • Mobile & ChromeOS Devices: List, inspect, lock, or wipe managed mobile devices and ChromeOS endpoints.
  • Shared Resources: Manage organization-wide calendar resources, office locations, and building assets.

šŸ·ļø Licensing & Domains

  • License Assignment: Query Google Workspace SKUs and dynamically assign or revoke user licenses.
  • Domain Management: Monitor primary domains, add domain aliases, and verify DNS records.

šŸ“Š Audit & Compliance Reporting

  • Activity Logs: Retrieve real-time security audit logs, admin activity, and login events.
  • Compliance Monitoring: Audit inactive accounts, privilege escalations, and security posture across tenants.

šŸ›”ļø Multi-Tenant Architecture & Security

  • Tenant Isolation: Uses isolated tokens (x-tenant-token) and header authorization to keep organizational data completely separate.
  • Interactive OAuth 2.0 Flow: Users authenticate directly via native MCP tools (generateAuthUrl and submitAuthCode) without manual credential handling.
  • Ephemeral Token Storage: Keeps access tokens securely in memory, eliminating lingering data footprints.

āš” Supported AI Clients