Ggsrun MCP Server

Google Apps Script and Drive operations via a Go-based CLI and MCP server interface.

Data last scanned today · Reviewed today

Overview

Ggsrun functions as both a command-line utility and an MCP server to handle Google Drive file operations and execute Google Apps Script (GAS) code. It leverages a concurrent streaming architecture in Go to manage complex interactions with Google Workspace APIs. Users can interact with the system through dedicated subcommands, a TUI filer mode, or via autonomous AI agents. The tool includes a security sandbox wrapper that allows users to define whitelists for API usage during execution.

Our verdict

With a security score of 40/100, this tool is categorized as high risk. The absence of a read-only mode, combined with the fact that it is a community-maintained project rather than an official vendor release, requires users to exercise caution regarding their Google Workspace data permissions. It is recommended primarily for users who can verify the sandbox configurations independently and audit the community-sourced codebase before granting full access.

  • Zero direct dependencies reduce potential supply-chain vulnerabilities.
  • Comprehensive documentation covers setup, commands, and security features.
  • Go-based concurrent architecture enables efficient data processing.
  • MIT license allows for transparent code review and usage.
  • No read-only mode requires careful management of write permissions.
  • Community-maintained status lacks formal vendor support or backing.
  • No detected OAuth support mechanisms in current configuration.

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What are the system requirements to run ggsrun?

The server requires Go 1.26.4 or higher to be installed on your system.

Does ggsrun support Google Shared Drives?

Yes, ggsrun includes native support for Shared Drives (Omni-Drive) by enforcing specific Google Drive API parameters for all operations.

What authentication methods are supported?

The server natively supports both browser-based loopback OAuth2 flows and secure Service Accounts.

How can I restrict Google Workspace API access during execution?

You can utilize the Security Sandbox feature, which uses an in-memory wrapper and whitelist configuration via a sandbox_config.json file to restrict API calls.

Badge

Ggsrun MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.