Google Admin MCP Server

A FastMCP server for managing Google Workspace users through the Admin Directory API.

Features

- List users in a domain
- Create new users with secure random passwords
- Get detailed user information
- Suspend and unsuspend users

Prerequisites

- Docker
- Google Workspace Admin account
- Google Admin Directory API enabled
- Base64 encoded OAuth2 token in GOOGLE_TOKEN_JSON environment variable

Installation

1. Clone the repository
2. Build the Docker image:
``bash
docker build -t google-admin-mcp .
`

Running the Server

Run the container:
`bash
docker run -e GOOGLE_TOKEN_JSON="your_base64_encoded_token" google-admin-mcp
`

Available Tools

$3


Lists users in a domain.
`json
{
"domain": "yourdomain.com"
}
`

$3

Creates a new user with a secure random password.
`json
{
"primaryEmail": "user@yourdomain.com",
"firstName": "First",
"lastName": "Last"
}
`

$3

Gets detailed information about a specific user.
`json
{
"userKey": "user@yourdomain.com"
}
`

$3

Suspends a user account.
`json
{
"userKey": "user@yourdomain.com"
}
`

$3

Unsuspends a user account.
`json
{
"userKey": "user@yourdomain.com"
}
``

Security Notes

- All users created will be required to change their password on first login
- Passwords are generated securely with:
- Minimum 12 characters
- Uppercase and lowercase letters
- Numbers
- Special characters
- The server requires a valid OAuth2 token with appropriate Admin Directory API scopes

Error Handling

The server provides clear error messages for:
- Authentication failures
- Invalid parameters
- API errors
- Missing environment variables

License

MIT License