Skip to main content
Google Workspace MCP servers usually require a Google Cloud OAuth app and Workspace admin approval before employees can connect. Use this guide to prepare the OAuth app and then register each Google MCP server in TrueFoundry.

​
Prerequisites

  • A TrueFoundry account with permission to add MCP servers.
  • Google Workspace super admin access.
  • A Google Cloud project where you can create OAuth credentials.

​
Create a Google OAuth Client

In Google Cloud Console, configure the OAuth consent screen for your organization and create a Web application OAuth client. Add this authorized redirect URI: 
https://<tfy-control-plane-base-url>/api/svc/v1/llm-gateway/mcp-servers/oauth2/callback
Copy the Client ID and Client Secret. In Google Admin Console, open Security > Access and data control > API controls and mark the OAuth app as trusted, or explicitly allow only the scopes required by the Google MCP server you are deploying.

​
Common Google Scopes

ServerCommon scopes
Docshttps://www.googleapis.com/auth/documents, https://www.googleapis.com/auth/drive.file, https://www.googleapis.com/auth/drive.readonly
Sheetshttps://www.googleapis.com/auth/spreadsheets, https://www.googleapis.com/auth/drive.file, https://www.googleapis.com/auth/drive.readonly
Slideshttps://www.googleapis.com/auth/presentations, https://www.googleapis.com/auth/drive.file, https://www.googleapis.com/auth/drive.readonly
Drivehttps://www.googleapis.com/auth/drive.readonly, https://www.googleapis.com/auth/drive.file
Gmail and Calendarhttps://www.googleapis.com/auth/gmail.readonly, https://www.googleapis.com/auth/gmail.compose, https://www.googleapis.com/auth/calendar.readonly, https://www.googleapis.com/auth/calendar.events
All servers typically also need openid, userinfo.email, and userinfo.profile.

​
Register in TrueFoundry

1

Add a Google MCP server

In TrueFoundry, open MCP Gateway, click Add MCP Server, and select Connect any Remote MCP Server. Repeat this for each Google MCP server you are deploying, such as Docs, Sheets, Slides, Drive, Gmail, or Calendar.
2

Configure the server

Use the server URL from the Google MCP implementation you are deploying and set Authentication to OAuth2. Turn on Auth Data, select the OAuth2 tab, and paste the Google OAuth Client ID and Client Secret from the previous section. Add the scopes required by the server you are registering.
3

Add collaborators

Add the users or teams that should use Google Workspace tools. Assign MCP Server Manager to administrators and MCP Server User to consumers.
4

Save and authorize

Click Add MCP Server. Each user should open the server’s Tools section and click Connect Now to complete Google OAuth. After authorization succeeds, Google tools appear and can be tried from the Agent Playground.

​
Security Notes

Prefer specific Google data access over marking broad scopes as trusted. Use per-user OAuth so Drive, Docs, Gmail, and Calendar access follows each user’s Google Workspace permissions.