Published by the company that makes the product.

What it can access

OAuth inherits spaces visible to the user and can allow posting.

Security note

Developer Preview. Use a new test space with no real participants. A mistaken post is an external action, not a private draft.

Do you need it?

Connect only if a defined team workflow requires searching or posting in Google Chat. A copied message and human post are safer for occasional use.

Capability and permissions

OAuth can expose messages and members in spaces visible to the connected user. Write access can post a message that other people see immediately.

Least-privilege setup

As of 2026-09-01, Google’s Workspace MCP servers remain Developer Preview. Create a new space with only the workshop account and one facilitator. Do not add real team history.

Harmless success test

Ask the client to post MCP TEST - no action required in the test space. Confirm it posted nowhere else.

Disable, revoke, remove

Disconnect in the AI client, revoke Google Account access, remove the account from the test space, and delete the space if possible.

When not to connect

Do not connect spaces used for source coordination, legal strategy, safeguarding, staff matters, incident response, or protected locations.