Give Claude Code access to your Gmail, Google Drive and Google Calendar

Do not do this unless you understand how prompt injection works, and the lethal trifecta. Most people should just use the more limited features available in the Claude Web app, and patiently await an official integration for Claude Code. Note also that your organisation's IT security team may prohibit this.

During setup, you'll need to create a project in Google Cloud Console, enable the relevant APIs, setup oAuth, and add yourself as a test user. If you don't already know how to do these things, that means you should stop reading this blog post.

When you get serious about Claude Skills, you'll want to create calendar events, send emails, pull documents from Google Drive, and so on.

To get set up, first install my secure MCP install skill. Then ask Claude:

Please install this MCP server using your secure-mcp-install skill.

https://github.com/taylorwilsdon/google_workspace_mcp https://github.com/taylorwilsdon/google_workspace_mcp/tree/main?tab=readme-ov-file#tool-tiers

If Claude reports that it can't take some particular action, tell it:

Please use the --tool-tier extended mode of the Google Workspace MCP server.

https://github.com/taylorwilsdon/google_workspace_mcp/tree/main?tab=readme-ov-file#tool-tiers

For example, you'll need "extended" mode if you want to archive or delete messages in Gmail.

Be careful when granting tool-use permissions. For actions that open up data exfiltration risk, you should grant permission for one-off tool calls only, or be very sure that other pillars of the lethal trifecta are covered in that context.