Release notes

Docs can insert date chips and Chat can list who is in a space. Hosted sign-in can now show Google's account chooser, Chat tools take a space ID in either form, and a warning that legacy OAuth logged on every tool call is gone.

• Docs batch_update_doc has an insert_date operation that adds a date smart chip, with an optional date format, time format and timezone. It is placed the same way as insert_person.
• Chat list_spaces takes space_id to list that space's members instead: people, apps and groups, each with their role, and pending invitations marked.
• Chat get_messages, send_message and search_messages accept a bare space ID as well as spaces/<id>, and a malformed ID gets an error that shows the expected format.
• Auth & security WORKSPACE_MCP_OAUTH_PROXY_GOOGLE_PROMPT sets the prompt the OAuth proxy sends to Google. select_account consent shows the account chooser, so someone signed in to a different Google account can connect the right one. Left unset, nothing changes.
• Auth & security Legacy OAuth 2.0 no longer logs Could not save credentials to session store on every tool call. The write behind it never stored anything, so it was removed.

Sheets can copy a range the way the Sheets UI does, formulas and formatting included. The rest are fixes: Gmail links open the right account in a browser signed in to several, plain-text emails with attachments stop getting hard-wrapped, calendar time ranges respect your timezone, and a failed Google API call logs one clean line instead of two tracebacks.

Heads up Tool error messages no longer start with Error calling tool '<name>': . Anything that matches on that prefix needs updating.

• Sheets modify_sheet_values takes source_range and paste_type to copy a range within a spreadsheet, across tabs too, with formulas shifting and formatting coming along. The destination can be just its top-left cell.
• Gmail Web links name the mailbox by email address instead of /u/0/, so in a browser signed in to several Google accounts they open the account the message belongs to.
• Gmail Plain-text drafts and sends with attachments get the same HTML version as messages without them, so Gmail no longer hard-wraps every line at about 76 characters when they are sent.
• Calendar Out-of-office and focus-time ranges read times without an offset, like 09:00:00, in the timezone you pass instead of as UTC.
• Contacts Contact URLs that differ only by path or query capitalisation are kept apart, so removing one no longer deletes the wrong entry.
• Chat search_messages results include the space, message and thread IDs, so any hit can be opened with get_messages, even in unnamed conversations.
• Slides batch_update_presentation reports how many matches each find-and-replace changed.
• Drive Drive uploads accept this server's own /attachments download links, reading the file from local storage instead of refusing it as a localhost URL.
• Platform A failed Google API call logs one scrubbed line instead of two tracebacks, one of which included the full request URL and its query string.

Gmail reads come back whole: mail in other character sets keeps every character, and bodies Gmail tucks behind an attachment are no longer empty. Calendar can change "this and all following" occurrences, comments can be edited and deleted, and Docs can insert person chips.

Heads up The Docs, Sheets and Slides comment tools can now delete comments, so they are marked as destructive. Clients that confirm destructive tools may start asking before using them.

• Gmail Message bodies are decoded with the character set the email declares, so windows-1252, iso-8859-1 and shift_jis mail no longer loses characters.
• Gmail Text and HTML bodies that Gmail stores behind an attachment are fetched instead of coming back empty, in reads, exports, forwards and replies.
• Gmail Message and thread reads take an opt-in include_links that lists the links from the HTML body that the plain-text version leaves out.
• Gmail get_gmail_message_content takes include_headers=False to skip the Subject/From/To/Date summary, and full exports are then named by message ID.
• Gmail HTML signatures sit the right distance below the message instead of under a stack of extra blank lines.
• Calendar manage_event gains this_and_following, which applies an update to one occurrence of a recurring event and every one after it, leaving earlier occurrences alone.
• Docs Comments on Docs, Sheets and Slides can be edited or deleted, for top-level comments you wrote.
• Docs batch_update_doc adds an insert_person operation that writes a person chip from an email address.
• Docs Docs built from markdown use normal paragraph spacing instead of filling the page with empty paragraphs.
• Docs Dropdown chips show their selected value when a doc is read as markdown or plain text.
• Platform Python 3.13 is now the default runtime, including the Docker image, and tests run on both 3.11 and 3.13.

A big community release. Gmail composes, replies and forwards exactly like Gmail web, Sheets gains borders, dropdowns, merges and tab styling, and HTTP deployments get a Host allowlist and a configurable OAuth consent screen.

• Gmail Sends, drafts, replies and forwards are built the way Gmail web builds them, quoted reply trail and forwarded-message block included. A new direction option handles right-to-left mail.
• Gmail from_email is checked against your send-as addresses, so an unknown alias fails with the valid ones listed instead of quietly sending from your default address.
• Gmail An HTML body that arrives escaped (<div>...) is rejected before sending, so recipients never get raw markup.
• Gmail batch_modify_gmail_message_labels accepts thread_ids to relabel whole conversations at once.
• Gmail Inline images show up inline instead of as attachments.
• Sheets format_sheet_range can merge and unmerge cells, draw borders and add dropdowns, and manage_sheet_tab gains a style action for tab color and gridlines.
• Docs Markdown tables become real Google Docs tables in populate_from_markdown, and body text after a heading no longer inherits the heading style.
• Docs debug_table_structure takes tab_id, and table edits fail on an unknown tab instead of silently writing into the first one.
• Calendar list_calendars shows each calendar's time zone, and compact get_events output marks cancelled events so they no longer look live.
• Drive copy_drive_file can carry comments over with copy_comments.
• Auth & security New opt-in WORKSPACE_MCP_ALLOWED_HOSTS rejects requests addressed to any other host, closing a DNS rebinding path.
• Auth & security WORKSPACE_MCP_OAUTH_PROXY_REQUIRE_CONSENT=remember shows the consent screen once per browser for each client instead of on every sign-in.
• Auth & security --permissions accepts combinations like gmail:readonly+send to grant exactly those scopes and nothing more.
• Auth & security The local server starts even when every OAuth callback port is busy, for example with a second copy of Claude Desktop open, and only needs a port once you actually sign in.
• Platform A streamed response that fails partway, such as a large download, is now reported as failed instead of ending as a clean but truncated success.
• Platform The Helm chart is published to GHCR on chart releases.

A reliability release. Gmail never risks sending the same email twice when a connection drops mid-send, and Gmail search, Chat space names, Apps Script deployments, Docs table borders and Drive uploads each get targeted fixes.

• Gmail Sends and forwards are never retried. A timeout or dropped connection returns an error asking you to check Sent, instead of risking a second copy.
• Gmail search_gmail_messages with include_headers lists each result's labels, so a re-saved draft can be told apart from sent mail.
• Gmail send_gmail_message is marked destructive, since a sent email cannot be taken back.
• Drive When local file access is off, file:// and private-network URLs are refused with a pointer to return_upload_url, the upload route that works there.
• Drive Attachments with very long names are trimmed to fit instead of failing with "File name too long".
• Chat One space you can no longer read no longer leaves every later DM and group chat with a fallback name.
• Docs update_table_cell_style accepts border_width: 0 to hide a cell border.
• Apps Script Updating a deployment keeps its existing settings, so changing only the description no longer repoints a pinned deployment to HEAD.
• Auth & security OpenTelemetry spans record which auth mode each tool call used and, with WORKSPACE_MCP_OTEL_USER_EMAIL, the Google account it actually ran as under domain-wide delegation.

The first 2.0 patch fixes OAuth sign-in for some clients and sneaks in a few features: reading a single Docs tab, cell-anchored Sheets comments, and comment anchors across Docs, Sheets and Slides.

Heads up manage_spreadsheet_comment now needs the Sheets write scope, so it is no longer available under sheets:readonly.

• Auth & security The sign-in challenge asks for the scopes the tools actually need, so clients that follow it get a usable token. A missing scope returns a clear "reconnect and grant access" message.
• Docs get_doc_content and get_doc_as_markdown take an optional tab_id, so you can read one tab of a large multi-tab doc. get_doc_as_markdown also picks it up from a ?tab= URL.
• Sheets manage_spreadsheet_comment can attach a new comment to a specific cell.
• Platform Comment listings for Docs, Sheets and Slides show where each comment is anchored, so an agent can find the exact element it refers to.
• Drive search_drive_files accepts older query fields like title contains, and free-text search handles apostrophes and backslashes.

Valkey-backed OAuth storage reconnects after dropped connections and gets a real readiness probe, and Chat search says how much it actually searched.

• Auth & security A new /health/ready probe returns 503 when OAuth storage is unreachable or slow, so an instance can be drained instead of restarted. /health stays a pure liveness check.
• Chat search_messages says when it only searched the first N spaces instead of claiming it covered all of them.
• Platform Dependency floors raised for oauthlib, urllib3, pyjwt and pypdf to pick up security fixes.

Google Chat direct messages and group chats show real names, and the room and DM filters work again.

• Chat DMs and unnamed group chats are labeled after their members ("Alice Smith, Bob Jones and 2 others") instead of "Unnamed Space".
• Chat Filtering list_spaces by room or DM no longer fails.

Calendar events land at exactly the time you asked for, HTML email looks the way it was written, and Drive and Apps Script each lose a crash.

• Calendar Timestamps with an explicit UTC offset keep that exact moment, and confirmations report the saved start, end and duration.
• Gmail Plain line breaks in HTML emails become real breaks instead of one run-on paragraph.
• Gmail Injected signatures are marked so Gmail treats them as signatures.
• Drive Shared-drive organizer lookups no longer crash with SSL errors.
• Apps Script list_script_processes works when given a script ID.

Apps Script function runs and Docs structure inspection work again, and startup failures are always visible to your MCP client.

• Apps Script run_script_function finds the right API Executable deployment automatically and explains the setup when there is none.
• Docs inspect_doc_structure no longer fails on every call.
• Drive Damaged Office files are reported as damaged rather than as an "unsupported encoding".
• Platform Comment tools return properly formatted output, and every fatal startup error is logged where MCP clients can see it.

Gmail replies land on the right message, Calendar understands recurring series, and Drive uploads get integrity and safety checks.

• Gmail Replies target the latest real message in a thread, not an older one or an existing draft.
• Gmail list_gmail_labels can filter by prefix, cutting one large account's response from 72 KB to under 1 KB.
• Calendar get_events can show recurring events as one series or as individual occurrences.
• Drive Inline uploads are validated with SHA-256 checks, a 100 MB ceiling and zip-bomb protection.
• Drive Word document extraction reads headers, footers, footnotes and endnotes with cleaner spacing.
• Apps Script Deployments show which script version they point at.
• Auth & security Token expiry thresholds are configurable, and a slow token check no longer blocks the whole server.

Accuracy fixes across Gmail, Calendar timezones, Drive shortcuts and log privacy.

• Calendar Start and end times can use different timezones, and invalid timezones are rejected early.
• Gmail Batch label changes report what Gmail actually did, not what was requested.
• Gmail Drafts use your default Send-As identity, and reads include the Reply-To header.
• Drive Renaming or moving a shortcut no longer renames the file it points to.
• Auth & security Search queries, subjects, file names and other free text are kept out of normal logs.

The ChatGPT connector can sign in again, OAuth 2.1 misconfiguration fails at startup with a clear message, and individual tools can be blocked by name.

Heads up OAuth 2.1 mode now requires GOOGLE_OAUTH_CLIENT_SECRET from a Web application client. The old "secretless" setup never completed sign-in, so the server now refuses to start until the secret is set.

• Auth & security ChatGPT developer-mode connectors complete their sign-in again.
• Auth & security OAuth 2.1 checks for the client secret at startup instead of failing on the last step of sign-in.
• Platform New --disabled-tools flag (or WORKSPACE_MCP_DISABLED_TOOLS) removes specific tools while keeping the rest of a tier.

Multi-user identity fixes and a CLI quoting fix.

• Auth & security Identity is resolved on every request, so clients that open a new session per call always act as the right user.
• Platform workspace-cli no longer strips quotes from values, which fixes exact-phrase Gmail searches.

The hourly OAuth 2.1 re-login loop is gone, Sheets and Gmail return complete data, and OpenTelemetry tracing is available.

Heads up read_sheet_values no longer stops at 50 rows. If you relied on that cap, set range_name explicitly.

• Auth & security OAuth 2.1 proxy sessions refresh in the background instead of forcing a new sign-in every hour.
• Sheets Reads return every row fetched, and malformed column references raise clear errors.
• Gmail Messages can be exported in full without truncation, and thread reads include To and Cc.
• Docs Pin table header rows to repeat across pages, and set row heights.
• Platform Optional OpenTelemetry tracing using the standard OTEL_* settings, plus security updates.

Fixes for Apps Script deployments, Slides inspection, Gmail reply threading, and startup when several servers launch at once.

• Apps Script Updating a deployment works and can point it at a new script version.
• Slides Pages show charts, images, videos and WordArt instead of "Unknown", including the spreadsheet behind a linked chart.
• Gmail Reply drafts appear inside the original conversation, and multi-line signatures keep their line breaks.
• Platform Personal and work servers starting together no longer race and crash.

A security update and a Gmail fix.

• Gmail Reply drafts created with a thread_id show up in the Gmail interface again.
• Platform Security update for pypdf.

Contact birthdays, and fixes for hangs and port exhaustion.

• Contacts Set or clear a contact's birthday.
• Platform Google API calls time out instead of hanging indefinitely.
• Auth & security Local mode no longer grabs its callback port at startup, so leftover processes cannot exhaust the port range.

A smoother first sign-in, inline images in email, and Office-to-Google conversion on upload.

• Auth & security Sign-in opens your browser automatically and can pre-fill the account.
• Gmail Embed images directly in message bodies.
• Drive Office files convert to native Google Slides and Sheets on import.
• Slides Text inside grouped shapes is read correctly.
• Calendar Events show their creator and organizer, and editing Meet events no longer errors.
• Apps Script Running functions with parameters, creating versions and deleting projects work again.
• Auth & security Fixes a re-login loop after reauthorizing.

Per-request impersonation for service accounts, shared drive listing, and more resilient writes.

• Auth & security Domain-wide delegation can act as a different user on each call, with an optional domain allowlist.
• Drive New list_shared_drives tool.
• Platform Writes to Drive, Docs and Gmail retry on transient failures.
• Slides Invalid text inserts are caught before they reach the API.
• Apps Script Script execution gets the scopes it needs.
• Platform Fixes a GitHub Actions workflow vulnerability.

Tool titles, a Claude Code plugin, and the Claude Desktop bundle moves from DXT to MCPB.

• Platform Every tool has a human-readable title and complete annotations.
• Platform A Claude Code marketplace plugin, and the Claude Desktop bundle switches from .dxt to .mcpb.
• Gmail Choose whether to include your signature when sending.
• Sheets New duplicate_sheet tool.
• Chat More reliable sender names.

Credentials in Google Cloud Storage, new Sheets row tools, and a round of sign-in security fixes.

• Auth & security Store credentials in Google Cloud Storage.
• Sheets Delete and move rows.
• Docs Replace a tab's content from Markdown.
• Gmail Attachments can be returned as base64, and trashed messages no longer cause ghost reply drafts.
• Auth & security OAuth callbacks escape HTML and refuse foreign listeners on the callback port, and allowed redirect URIs are configurable.

Complete table editing in Docs, a new calendar tool, and tighter credential file security.

• Docs Full table operations in batch_update_doc.
• Calendar New create_calendar tool.
• Auth & security Credential files are saved with owner-only permissions, and their paths are sanitized.

Focus time, RSVPs, Sheets tables, and smart chips in Markdown.

• Calendar Manage focus time, and RSVP to events you don't organize.
• Sheets Structured table support.
• Docs Markdown output renders smart chips, tabs and every paragraph element, and tables fill their cells reliably.
• Auth & security Single-user mode fills in your email automatically.

Restores a dependency the calendar tools needed.

• Calendar Adds the missing pytz dependency.

A small change with a big effect: Google Docs created with sophisticated formatting come out far closer to what you asked for.

• Docs Much richer formatting when building documents, including table background colors.

Claude Desktop fixes and raw email access.

• Gmail Fetch messages as HTML or raw source.
• Platform Claude Desktop bundle and local stdio mode fixed.

Workarounds for Claude Cowork and Claude Desktop sending malformed arguments, plus suggestion views and mailing list headers.

• Platform Accepts list and object arguments that some Claude clients send as strings.
• Docs Read documents with suggestions shown or hidden, and improved comment tools.
• Gmail Mailing list headers are exposed for spotting bulk mail.

Tasks permissions, Docker disk storage, bullet lists and richer Forms reads.

• Tasks New tasks:manage permission level.
• Docs Create bullet lists in batch updates.
• Forms get_form returns more of the form's structure.
• Platform Disk storage in Docker fixed.
• Auth & security Re-authentication is only suggested for actual auth errors.

Google Docs tabs and a better fallback for HTML email.

• Docs Work with document tabs.
• Gmail Better handling when an email only has an HTML body.
• Auth & security Single-user mode tells the model which account it is using.

Sign-in fixes for local stdio mode.

• Auth & security PKCE is set up correctly on the very first sign-in.
• Platform Fixes a CORS middleware crash.

Hyperlinks in Docs text edits.

• Docs modify_doc_text can add hyperlinks.

Attachment security hardening and paragraph styling.

• Auth & security Hardened attachment handling and storage paths.
• Docs Paragraph styling in batch updates.

A large batch of fixes as community contributions picked up pace.

• Drive SSRF protection when creating files from URLs.
• Gmail Message ID headers so replies thread properly in non-Gmail clients.
• Auth & security Refreshes persist, and Docs and Sheets tools get the Drive scopes they need.
• Apps Script Script files load correctly, and schemas work with LangChain's Gemini integration.
• Platform CLI mode fixes and an official Docker publish workflow.

Drive permissions, Docs lists and Sheets hyperlinks.

• Drive New Drive permissions tool.
• Docs Bulleted and numbered lists at the paragraph level.
• Sheets Hyperlinks in cells.

Batch updates for Google Forms.

• Forms New batch_update_form tool.
• Auth & security External OAuth 2.1 provider fix.

Compatibility fixes for FastMCP 2.14.4.

• Auth & security Access tokens are retrieved correctly on FastMCP 2.14.4.
• Platform Tool tier configuration fix.

Valkey becomes optional so Windows uvx installs work.

• Platform The Valkey dependency is now optional.

Gmail filters, cleaner HTML email and Drive sharing controls.

• Gmail Create, list and delete Gmail filters.
• Gmail HTML-only emails are handled gracefully.
• Drive Sharing and permission management tools.
• Sheets Clearer error details on reads and writes.

Rich Sheets formatting, Slides text extraction and direct download links.

• Sheets Text and background colors, conditional formatting, and tab title fixes.
• Slides get_presentation extracts slide text.
• Calendar Control event visibility.
• Drive New get_drive_file_download_url for HTTP downloads.

Attachments served over HTTP, Gmail pagination and a token refresh fix.

• Gmail Attachments are served by URL, and search is paginated.
• Auth & security Token refresh is no longer blocked by an unnecessary file check.

Every Drive call works with shared drives, plus file metadata updates.

• Drive Shared drives are supported everywhere, and update_drive_file manages metadata.
• Drive Create files from file:// URLs.
• Gmail To and Cc in message metadata.

Gmail attachments, external OAuth providers and memory-friendly downloads.

• Gmail Read attachments, send from the right address, and draft in HTML.
• Auth & security External OAuth 2.1 provider mode for bearer tokens.
• Calendar Event attachment details and better timezone handling.
• Drive Downloads use temp files to save memory.

HTML drafts, calendar attachment details and timezone fixes.

• Gmail Draft messages in HTML.
• Calendar Attachment details on events, and timezone-aware times.
• Tasks Tasks fix.

Claude Desktop extension cleanup.

A quick fix for Google Tasks.

Subtasks in Google Tasks and legacy OAuth compatibility.

• Tasks Subtask hierarchy is shown, and parameters work across clients.
• Auth & security Legacy OAuth sessions work alongside modern methods.

Fixes for Tasks defaults in MCP Inspector and Google ADK compatibility.

Claude Desktop extension fixes and tidier startup logs.

Only the scopes your enabled tools need are requested.

• Auth & security Scope requests follow the enabled tool set.

Stateless mode for containers, and Docs to PDF.

• Platform Stateless mode for container deployments.
• Docs Export Google Docs to PDF.

Safer logging and reverse proxy support.

• Platform WORKSPACE_EXTERNAL_URL for proxies, Docker Compose for local development, and safer log formatting.

Insert images into Docs and check Drive permissions.

• Docs Insert images into documents.
• Drive Check file permissions before sharing.

Clear guidance when a Drive file needs public sharing.

• Drive Detects when a file must be shared publicly and explains what to do.

OAuth logic cleaned up and consolidated.

Tool registration fix.

Finer-grained Google Docs editing.

• Docs More precise document editing.
• Sheets modify_sheet_values accepts values passed as a JSON string.

Cleanup following the OAuth rework.

Calendar reminders.

• Calendar Set reminders on events.

A Helm chart for Kubernetes.

• Platform Official Helm chart.

Server URL fix.

Google Programmable Search Engine support.

• Search Search the web through Google Programmable Search Engine.

Create and edit events with Google Meet links.

• Calendar Google Meet support when creating and editing events.

Tells the model how to fix it when a Google API isn't enabled yet.

Smoother OAuth server startup in stdio mode.

Calendar search, and instant start for mcpo.

• Calendar Search events by text.

Fixes an unexpected session header error.

Batch Gmail label changes and Docs tabs.

• Gmail Change labels on many messages at once.
• Docs get_doc_content reads every tab.

Batch thread retrieval and automatic retries for network hiccups.

• Gmail Fetch many threads in a single call.
• Platform Read operations retry transient SSL errors with backoff.

The Claude Desktop extension ships with every release, plus a redirect URI fix.

Docker healthcheck fix for custom ports.

Clearer installation and OAuth setup instructions.

Easier Claude Desktop auto-install.

Claude installer update.

Configure OAuth with environment variables, and manage Docs comments.

• Auth & security GOOGLE_OAUTH_CLIENT_ID and GOOGLE_OAUTH_CLIENT_SECRET environment variables.
• Docs Read, create, reply to and resolve document comments.

Calendar attachments, Drive files from URLs, and consistent error handling.

• Calendar Attach Drive files to events, and fetch a single event.
• Drive Create files from a public URL.
• Platform Consistent error handling across every service.

README refresh.