Release notes

Valkey-backed OAuth storage reconnects after dropped connections and gets a real readiness probe, and Chat search says how much it actually searched.

• Auth & security A new /health/ready probe returns 503 when OAuth storage is unreachable or slow, so an instance can be drained instead of restarted. /health stays a pure liveness check.
• Chat search_messages says when it only searched the first N spaces instead of claiming it covered all of them.
• Platform Dependency floors raised for oauthlib, urllib3, pyjwt and pypdf to pick up security fixes.

Google Chat direct messages and group chats show real names, and the room and DM filters work again.

• Chat DMs and unnamed group chats are labeled after their members ("Alice Smith, Bob Jones and 2 others") instead of "Unnamed Space".
• Chat Filtering list_spaces by room or DM no longer fails.

Calendar events land at exactly the time you asked for, HTML email looks the way it was written, and Drive and Apps Script each lose a crash.

• Calendar Timestamps with an explicit UTC offset keep that exact moment, and confirmations report the saved start, end and duration.
• Gmail Plain line breaks in HTML emails become real breaks instead of one run-on paragraph.
• Gmail Injected signatures are marked so Gmail treats them as signatures.
• Drive Shared-drive organizer lookups no longer crash with SSL errors.
• Apps Script list_script_processes works when given a script ID.

Apps Script function runs and Docs structure inspection work again, and startup failures are always visible to your MCP client.

• Apps Script run_script_function finds the right API Executable deployment automatically and explains the setup when there is none.
• Docs inspect_doc_structure no longer fails on every call.
• Drive Damaged Office files are reported as damaged rather than as an "unsupported encoding".
• Platform Comment tools return properly formatted output, and every fatal startup error is logged where MCP clients can see it.

Gmail replies land on the right message, Calendar understands recurring series, and Drive uploads get integrity and safety checks.

• Gmail Replies target the latest real message in a thread, not an older one or an existing draft.
• Gmail list_gmail_labels can filter by prefix, cutting one large account's response from 72 KB to under 1 KB.
• Calendar get_events can show recurring events as one series or as individual occurrences.
• Drive Inline uploads are validated with SHA-256 checks, a 100 MB ceiling and zip-bomb protection.
• Drive Word document extraction reads headers, footers, footnotes and endnotes with cleaner spacing.
• Apps Script Deployments show which script version they point at.
• Auth & security Token expiry thresholds are configurable, and a slow token check no longer blocks the whole server.

Accuracy fixes across Gmail, Calendar timezones, Drive shortcuts and log privacy.

• Calendar Start and end times can use different timezones, and invalid timezones are rejected early.
• Gmail Batch label changes report what Gmail actually did, not what was requested.
• Gmail Drafts use your default Send-As identity, and reads include the Reply-To header.
• Drive Renaming or moving a shortcut no longer renames the file it points to.
• Auth & security Search queries, subjects, file names and other free text are kept out of normal logs.

The ChatGPT connector can sign in again, OAuth 2.1 misconfiguration fails at startup with a clear message, and individual tools can be blocked by name.

Heads up OAuth 2.1 mode now requires GOOGLE_OAUTH_CLIENT_SECRET from a Web application client. The old "secretless" setup never completed sign-in, so the server now refuses to start until the secret is set.

• Auth & security ChatGPT developer-mode connectors complete their sign-in again.
• Auth & security OAuth 2.1 checks for the client secret at startup instead of failing on the last step of sign-in.
• Platform New --disabled-tools flag (or WORKSPACE_MCP_DISABLED_TOOLS) removes specific tools while keeping the rest of a tier.

Multi-user identity fixes and a CLI quoting fix.

• Auth & security Identity is resolved on every request, so clients that open a new session per call always act as the right user.
• Platform workspace-cli no longer strips quotes from values, which fixes exact-phrase Gmail searches.

The hourly OAuth 2.1 re-login loop is gone, Sheets and Gmail return complete data, and OpenTelemetry tracing is available.

Heads up read_sheet_values no longer stops at 50 rows. If you relied on that cap, set range_name explicitly.

• Auth & security OAuth 2.1 proxy sessions refresh in the background instead of forcing a new sign-in every hour.
• Sheets Reads return every row fetched, and malformed column references raise clear errors.
• Gmail Messages can be exported in full without truncation, and thread reads include To and Cc.
• Docs Pin table header rows to repeat across pages, and set row heights.
• Platform Optional OpenTelemetry tracing using the standard OTEL_* settings, plus security updates.

Fixes for Apps Script deployments, Slides inspection, Gmail reply threading, and startup when several servers launch at once.

• Apps Script Updating a deployment works and can point it at a new script version.
• Slides Pages show charts, images, videos and WordArt instead of "Unknown", including the spreadsheet behind a linked chart.
• Gmail Reply drafts appear inside the original conversation, and multi-line signatures keep their line breaks.
• Platform Personal and work servers starting together no longer race and crash.

A security update and a Gmail fix.

• Gmail Reply drafts created with a thread_id show up in the Gmail interface again.
• Platform Security update for pypdf.

Contact birthdays, and fixes for hangs and port exhaustion.

• Contacts Set or clear a contact's birthday.
• Platform Google API calls time out instead of hanging indefinitely.
• Auth & security Local mode no longer grabs its callback port at startup, so leftover processes cannot exhaust the port range.

A smoother first sign-in, inline images in email, and Office-to-Google conversion on upload.

• Auth & security Sign-in opens your browser automatically and can pre-fill the account.
• Gmail Embed images directly in message bodies.
• Drive Office files convert to native Google Slides and Sheets on import.
• Slides Text inside grouped shapes is read correctly.
• Calendar Events show their creator and organizer, and editing Meet events no longer errors.
• Apps Script Running functions with parameters, creating versions and deleting projects work again.
• Auth & security Fixes a re-login loop after reauthorizing.

Per-request impersonation for service accounts, shared drive listing, and more resilient writes.

• Auth & security Domain-wide delegation can act as a different user on each call, with an optional domain allowlist.
• Drive New list_shared_drives tool.
• Platform Writes to Drive, Docs and Gmail retry on transient failures.
• Slides Invalid text inserts are caught before they reach the API.
• Apps Script Script execution gets the scopes it needs.
• Platform Fixes a GitHub Actions workflow vulnerability.

Tool titles, a Claude Code plugin, and the Claude Desktop bundle moves from DXT to MCPB.

• Platform Every tool has a human-readable title and complete annotations.
• Platform A Claude Code marketplace plugin, and the Claude Desktop bundle switches from .dxt to .mcpb.
• Gmail Choose whether to include your signature when sending.
• Sheets New duplicate_sheet tool.
• Chat More reliable sender names.

Credentials in Google Cloud Storage, new Sheets row tools, and a round of sign-in security fixes.

• Auth & security Store credentials in Google Cloud Storage.
• Sheets Delete and move rows.
• Docs Replace a tab's content from Markdown.
• Gmail Attachments can be returned as base64, and trashed messages no longer cause ghost reply drafts.
• Auth & security OAuth callbacks escape HTML and refuse foreign listeners on the callback port, and allowed redirect URIs are configurable.

Complete table editing in Docs, a new calendar tool, and tighter credential file security.

• Docs Full table operations in batch_update_doc.
• Calendar New create_calendar tool.
• Auth & security Credential files are saved with owner-only permissions, and their paths are sanitized.

Focus time, RSVPs, Sheets tables, and smart chips in Markdown.

• Calendar Manage focus time, and RSVP to events you don't organize.
• Sheets Structured table support.
• Docs Markdown output renders smart chips, tabs and every paragraph element, and tables fill their cells reliably.
• Auth & security Single-user mode fills in your email automatically.

Restores a dependency the calendar tools needed.

• Calendar Adds the missing pytz dependency.

A small change with a big effect: Google Docs created with sophisticated formatting come out far closer to what you asked for.

• Docs Much richer formatting when building documents, including table background colors.

Claude Desktop fixes and raw email access.

• Gmail Fetch messages as HTML or raw source.
• Platform Claude Desktop bundle and local stdio mode fixed.

Workarounds for Claude Cowork and Claude Desktop sending malformed arguments, plus suggestion views and mailing list headers.

• Platform Accepts list and object arguments that some Claude clients send as strings.
• Docs Read documents with suggestions shown or hidden, and improved comment tools.
• Gmail Mailing list headers are exposed for spotting bulk mail.

Tasks permissions, Docker disk storage, bullet lists and richer Forms reads.

• Tasks New tasks:manage permission level.
• Docs Create bullet lists in batch updates.
• Forms get_form returns more of the form's structure.
• Platform Disk storage in Docker fixed.
• Auth & security Re-authentication is only suggested for actual auth errors.

Google Docs tabs and a better fallback for HTML email.

• Docs Work with document tabs.
• Gmail Better handling when an email only has an HTML body.
• Auth & security Single-user mode tells the model which account it is using.

Sign-in fixes for local stdio mode.

• Auth & security PKCE is set up correctly on the very first sign-in.
• Platform Fixes a CORS middleware crash.

Hyperlinks in Docs text edits.

• Docs modify_doc_text can add hyperlinks.

Attachment security hardening and paragraph styling.

• Auth & security Hardened attachment handling and storage paths.
• Docs Paragraph styling in batch updates.

A large batch of fixes as community contributions picked up pace.

• Drive SSRF protection when creating files from URLs.
• Gmail Message ID headers so replies thread properly in non-Gmail clients.
• Auth & security Refreshes persist, and Docs and Sheets tools get the Drive scopes they need.
• Apps Script Script files load correctly, and schemas work with LangChain's Gemini integration.
• Platform CLI mode fixes and an official Docker publish workflow.

Drive permissions, Docs lists and Sheets hyperlinks.

• Drive New Drive permissions tool.
• Docs Bulleted and numbered lists at the paragraph level.
• Sheets Hyperlinks in cells.

Batch updates for Google Forms.

• Forms New batch_update_form tool.
• Auth & security External OAuth 2.1 provider fix.

Compatibility fixes for FastMCP 2.14.4.

• Auth & security Access tokens are retrieved correctly on FastMCP 2.14.4.
• Platform Tool tier configuration fix.

Valkey becomes optional so Windows uvx installs work.

• Platform The Valkey dependency is now optional.

Gmail filters, cleaner HTML email and Drive sharing controls.

• Gmail Create, list and delete Gmail filters.
• Gmail HTML-only emails are handled gracefully.
• Drive Sharing and permission management tools.
• Sheets Clearer error details on reads and writes.

Rich Sheets formatting, Slides text extraction and direct download links.

• Sheets Text and background colors, conditional formatting, and tab title fixes.
• Slides get_presentation extracts slide text.
• Calendar Control event visibility.
• Drive New get_drive_file_download_url for HTTP downloads.

Attachments served over HTTP, Gmail pagination and a token refresh fix.

• Gmail Attachments are served by URL, and search is paginated.
• Auth & security Token refresh is no longer blocked by an unnecessary file check.

Every Drive call works with shared drives, plus file metadata updates.

• Drive Shared drives are supported everywhere, and update_drive_file manages metadata.
• Drive Create files from file:// URLs.
• Gmail To and Cc in message metadata.

Gmail attachments, external OAuth providers and memory-friendly downloads.

• Gmail Read attachments, send from the right address, and draft in HTML.
• Auth & security External OAuth 2.1 provider mode for bearer tokens.
• Calendar Event attachment details and better timezone handling.
• Drive Downloads use temp files to save memory.

HTML drafts, calendar attachment details and timezone fixes.

• Gmail Draft messages in HTML.
• Calendar Attachment details on events, and timezone-aware times.
• Tasks Tasks fix.

Claude Desktop extension cleanup.

A quick fix for Google Tasks.

Subtasks in Google Tasks and legacy OAuth compatibility.

• Tasks Subtask hierarchy is shown, and parameters work across clients.
• Auth & security Legacy OAuth sessions work alongside modern methods.

Fixes for Tasks defaults in MCP Inspector and Google ADK compatibility.

Claude Desktop extension fixes and tidier startup logs.

Only the scopes your enabled tools need are requested.

• Auth & security Scope requests follow the enabled tool set.

Stateless mode for containers, and Docs to PDF.

• Platform Stateless mode for container deployments.
• Docs Export Google Docs to PDF.

Safer logging and reverse proxy support.

• Platform WORKSPACE_EXTERNAL_URL for proxies, Docker Compose for local development, and safer log formatting.

Insert images into Docs and check Drive permissions.

• Docs Insert images into documents.
• Drive Check file permissions before sharing.

Clear guidance when a Drive file needs public sharing.

• Drive Detects when a file must be shared publicly and explains what to do.

OAuth logic cleaned up and consolidated.

Tool registration fix.

Finer-grained Google Docs editing.

• Docs More precise document editing.
• Sheets modify_sheet_values accepts values passed as a JSON string.

Cleanup following the OAuth rework.

Calendar reminders.

• Calendar Set reminders on events.

A Helm chart for Kubernetes.

• Platform Official Helm chart.

Server URL fix.

Google Programmable Search Engine support.

• Search Search the web through Google Programmable Search Engine.

Create and edit events with Google Meet links.

• Calendar Google Meet support when creating and editing events.

Tells the model how to fix it when a Google API isn't enabled yet.

Smoother OAuth server startup in stdio mode.

Calendar search, and instant start for mcpo.

• Calendar Search events by text.

Fixes an unexpected session header error.

Batch Gmail label changes and Docs tabs.

• Gmail Change labels on many messages at once.
• Docs get_doc_content reads every tab.

Batch thread retrieval and automatic retries for network hiccups.

• Gmail Fetch many threads in a single call.
• Platform Read operations retry transient SSL errors with backoff.

The Claude Desktop extension ships with every release, plus a redirect URI fix.

Docker healthcheck fix for custom ports.

Clearer installation and OAuth setup instructions.

Easier Claude Desktop auto-install.

Claude installer update.

Configure OAuth with environment variables, and manage Docs comments.

• Auth & security GOOGLE_OAUTH_CLIENT_ID and GOOGLE_OAUTH_CLIENT_SECRET environment variables.
• Docs Read, create, reply to and resolve document comments.

Calendar attachments, Drive files from URLs, and consistent error handling.

• Calendar Attach Drive files to events, and fetch a single event.
• Drive Create files from a public URL.
• Platform Consistent error handling across every service.

README refresh.