Google Drive MCP Server

An MCP (Model Context Protocol) server that enables Claude to interact with your Google Drive. Works with Claude Web via OAuth2 authentication.

Features

List files - Browse your Drive files and folders
Search - Full-text search across your Drive
Read files - Read content from text files, Google Docs, and Sheets
Create folders - Organize your Drive with new folders
Create files - Create text files, JSON files, or Google Docs
Create sheets - Create Google Sheets with optional data
Move files - Move files and folders to different locations
Edit docs - Full document editing with formatting, headings, images, links, and lists

Tools

Tool	Description
`list_drive_files`	List files in Drive, optionally filtered by folder, MIME type, or query
`get_file_info`	Get detailed metadata about a specific file
`search_drive`	Search files by name or content
`read_file`	Read the content of a file (supports text files, Google Docs, Sheets as CSV)
`move_file`	Move a file or folder to a different location
`create_folder`	Create a new folder
`create_file`	Create a new file with text content
`create_sheet`	Create a new Google Sheet with optional initial data
`append_to_doc`	Append text to the end of a Google Doc
`find_replace_in_doc`	Find and replace text in a Google Doc
`insert_text`	Insert formatted text (bold, italic, colors, font size) at start or end
`set_heading`	Convert a paragraph to a heading (H1-H6)
`insert_image`	Insert an image from a URL
`insert_link`	Insert a hyperlink
`insert_list`	Insert a bulleted or numbered list

Architecture

Claude Web → OAuth2 → Your Cloud Run Server → Google Drive API
                           ↓
                      Firestore (tokens)
                      Secret Manager (credentials)

See ARCHITECTURE.md for detailed documentation on how to build similar MCP servers.

Quick Start

Prerequisites

Google Cloud account with billing enabled
gcloud CLI installed and authenticated
Node.js 20+

1. Clone and Install

git clone https://github.com/matty-v/google-drive-mcp.git
cd google-drive-mcp
npm install

2. Set Up Google Cloud

export PROJECT_ID="your-project-id"
export REGION="us-central1"

gcloud config set project $PROJECT_ID

# Enable required APIs
gcloud services enable \
  run.googleapis.com \
  secretmanager.googleapis.com \
  firestore.googleapis.com \
  drive.googleapis.com

# Create Firestore database
gcloud firestore databases create --location=$REGION

3. Create OAuth Credentials

Go to Google Cloud Console - Credentials
Click Create Credentials → OAuth client ID
Application type: Web application
Name: MCP Drive Server
Leave redirect URIs empty for now (we'll add after deployment)
Copy the Client ID and Client Secret

4. Configure OAuth Consent Screen

Go to OAuth consent screen
User Type: External
Fill in required fields
Add scopes: drive, drive.file, userinfo.email
Add yourself as a test user

5. Store Secrets

echo -n "YOUR_CLIENT_ID" | gcloud secrets create oauth-client-id --data-file=-
echo -n "YOUR_CLIENT_SECRET" | gcloud secrets create oauth-client-secret --data-file=-

6. Deploy

npm run build

gcloud run deploy mcp-drive-server \
  --source . \
  --region $REGION \
  --allow-unauthenticated \
  --set-env-vars "GCP_PROJECT=$PROJECT_ID"

7. Update OAuth Redirect URI

Get your service URL:

gcloud run services describe mcp-drive-server --region $REGION --format="value(status.url)"

Go back to Google Cloud Console - Credentials
Edit your OAuth client
Add authorized redirect URI: https://YOUR-SERVICE-URL/google/callback

8. Update Cloud Run with BASE_URL

SERVICE_URL=$(gcloud run services describe mcp-drive-server --region $REGION --format="value(status.url)")

gcloud run services update mcp-drive-server \
  --region $REGION \
  --set-env-vars "BASE_URL=$SERVICE_URL,GCP_PROJECT=$PROJECT_ID"

9. Grant IAM Permissions

SA_EMAIL="${PROJECT_ID}-compute@developer.gserviceaccount.com"

# Firestore access
gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:$SA_EMAIL" \
  --role="roles/datastore.user"

# Secret Manager access
gcloud secrets add-iam-policy-binding oauth-client-id \
  --member="serviceAccount:$SA_EMAIL" \
  --role="roles/secretmanager.secretAccessor"

gcloud secrets add-iam-policy-binding oauth-client-secret \
  --member="serviceAccount:$SA_EMAIL" \
  --role="roles/secretmanager.secretAccessor"

10. Connect to Claude Web

Go to claude.ai
Settings → Integrations
Add MCP server with your Cloud Run URL
Click Connect and authenticate with Google

Usage Examples

Once connected, you can ask Claude:

"List my recent Google Drive files"
"Search my Drive for documents about quarterly reports"
"Read the content of my meeting notes document"
"What's in my budget spreadsheet?"
"Create a folder called 'Projects' in my Drive"
"Create a file called 'notes.txt' with my meeting notes"
"Create a Google Doc called 'Project Plan' with an outline"
"Move the budget spreadsheet to the Finance folder"
"Create a spreadsheet called 'Expenses' with columns for Date, Description, and Amount"
"Append today's meeting notes to my Project Doc"
"Replace all occurrences of '2024' with '2025' in my annual report"
"Add a bold heading called 'Introduction' to my blog post"
"Insert a bulleted list of key takeaways"
"Add a link to the source article"

Security

OAuth2 with PKCE - Secure authorization flow
Per-user authentication - Each user authenticates with their own Google account
Token encryption - Tokens stored encrypted in Firestore
Minimal scopes - Only requests necessary Drive permissions
No credential storage - Your Google password never touches the server

Development

# Install dependencies
npm install

# Build TypeScript
npm run build

# Run locally (requires environment variables)
npm start

License

MIT

google-drive-mcp