Connect Google Workspace
Connects the company's Google Workspace through its own service account, for the mailboxes the agent may act as.
Free
This tool costs nothing to call.
An example
Connect our Google Workspace for support@ only. Here is the service account's key.
Your agent callsgoogle_connectFree
The example business is Halverson Cycle & Repair, a bike shop with a repair workshop in Portland, Oregon. The reply is the one the tool really gives.
{
"secret": "{\"type\": \"service_account\", \"client_email\": \"conecto@halverson.iam.gserviceaccount.com\", \"private_key\": \"-----BEGIN PRIVATE KEY-----...\"}",
"mailboxes": [
"support@halversoncycle.example"
]
}Use it when
The company uses Gmail and Drive and wants the agent to work in them there.
What it does
Connect the company's own Google Workspace so the agent works in its Gmail, Google Calendar and Drive, which stay the source of truth. The company makes a service account in Google Cloud, and its Workspace admin gives the account's client ID domain-wide delegation for gmail.modify, calendar and drive. Give the account's JSON key and the mailboxes the agent may act as (it never acts as anyone else). Each mailbox is checked before anything is kept. On accounts with an owner, cancelling events and replacing files wait for the owner's approval by default. Free.
What comes back
google_workspace: service_account, mailboxes and connected_at; need_approval, the tools that now wait for the owner. Every reply also carries cost_usd and balance_usd.
Inputs
| Name | Type | What it is |
|---|---|---|
secretRequired | string | The service account's JSON key. Never shown again. 50 to 10,000 characters. |
mailboxesRequired | array of strings | The addresses the agent may act as, like support@ and sales@. 1 to 20 items. |
The call
Over MCP, call google_connect on https://api.conecto.chat/mcp/googleworkspace. Over REST:
curl -X POST https://api.conecto.chat/v1/tools/google_connect \
-H "Authorization: Bearer $CONECTO_KEY" \
-H "Content-Type: application/json" \
-d '{"secret":"{\"type\": \"service_account\", \"client_email\": \"conecto@halverson.iam.gserviceaccount.com\", \"private_key\": \"-----BEGIN PRIVATE KEY-----...\"}","mailboxes":["support@halversoncycle.example"]}'When it refuses
A refused call costs nothing and says what to do next.
| Code | When | What to do |
|---|---|---|
invalid_input400 | The key is not a service account key, or a mailbox is not an email address. | Send the JSON key as Google Cloud downloads it, and 1 to 20 mailboxes. |
vendor_rejected502 | Google refused the key's delegation for a mailbox. | Give the key's client ID domain-wide delegation in the Admin console. |
More Google Workspace tools
All 11 tools- Search Gmail
google_mail_searchThe newest messages in a mailbox, or those matching a Gmail search.Free* - Read a Gmail message
google_mail_readOne message in full, with its body as text and its attachments' names.Free* - Send Gmail
google_mail_sendSends an email, or a reply in the same thread, as one of the company's mailboxes.$0.001 a call - Read a Google Calendar
google_calendar_eventsThe events in a mailbox's calendar between two times, in UTC.Free* - Add a Google Calendar event
google_calendar_createAdds an event to a mailbox's calendar and invites its attendees, with a Meet link if asked.$0.001 a call - Cancel a Google Calendar event
google_calendar_cancelCancels an event and tells its attendees; waits for the owner by default.$0.001 a call - Search Google Drive
google_drive_searchFiles in a mailbox user's Drive, shared drives included, whose words match.Free* - Read a Google Drive file
google_drive_readA Drive file's words: Docs, Sheets, Slides, text, PDF or Office, up to 5 MB.Free*
Give this to your agent.
Set up Conecto from https://conecto.chat/SKILL.md