Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bakissation/mcp-google-multi --skill google-workspacegit clone --depth 1 https://github.com/bakissation/mcp-google-multiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bakissation/mcp-google-multi/google-workspace)<a href="https://agentmods.dev/skills/bakissation/mcp-google-multi/google-workspace"><img src="https://agentmods.dev/badge/skills/bakissation/mcp-google-multi/google-workspace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bakissation/mcp-google-multi/google-workspace"><img src="https://agentmods.dev/badge/skills/bakissation/mcp-google-multi/google-workspace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00092 | $0.02086 |
| Opus 5.5 | $0.00037 | $0.00834 |
| Sonnet 5.5 | $0.00018 | $0.00417 |
| Haiku 4.5 | $0.00009 | $0.00209 |
Grade A, and why
google-workspace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 163 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Google Workspace MCP server
This server exposes Google Workspace as MCP tools: a small set of curated, hand-written tools per service, a long tail of generated tools (one per Google API Discovery method), and an escape hatch for anything else. Reading this skill before the first call avoids the two most common failures: guessing an account when none was configured as default, and guessing an argument name instead of using the one the tool actually declares.
1. Pick the account
Every operational tool takes an account argument naming one of the
configured aliases (an alias is a short local name, not the email address
itself). Before calling anything:
- Call
account_listfirst. It returns each alias, its email, admin flag, token status, and which alias (if any) is the configured default. - If a default account is set, omit
accounton a single-account call; the server injects the default. Passing an alias is always safe too. - If no default is set and more than one account is configured, you must
pass
accountexplicitly. A call that omits it then fails withE_NO_DEFAULT_ACCOUNTand a hint listing everyalias=emailpair so you can match the one the user means by email, name, or context, rather than guessing. - Read tools accept
"*"for theaccountargument to fan out across every configured account (bounded concurrency), or a comma-separated subset such as"work,personal". Fan-out is read-only by design: write tools, and the handful of read tools that save a file to local disk (drive_download,drive_export,gmail_download_attachment), take exactly one account. A fan-out call returns{ results: [{ account, ok, data|error }], partial }so one account failing never hides the others.
2. Discover before calling
Tools are hidden from the model's context until revealed, but every tool is always callable by exact name (discovery is a listing optimization, not a security boundary).
- Call
{service}_discover(e.g.gmail_discover,drive_discover) for the service you need. It returns that service's catalog: each tool's name, a one-line summary, its arguments, and its read/create/update/delete class. An optionalqueryargument filters the catalog by keyword. - Call the tool by its exact name from that catalog. Do not guess a name by analogy with another service.
discover_allreveals every curated tool across all services at once, useful before a session doing substantial cross-service work, anddiscover_resetcollapses back to the configured default afterward to reclaim context.- A client that loads tool schemas on demand (rather than accepting everything a server advertises) may need its own tool-search or tool-load step before a newly revealed tool is actually callable. If a call to a tool you just discovered fails as unknown on such a client, look for that client's own load-tool mechanism before retrying the Google call itself.
What ships with it
29 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- reference/admin.md 4.4 KB
- reference/analytics.md 6.1 KB
- reference/appsmarket.md 361 B
- reference/calendar.md 6.6 KB
- reference/chat.md 2.0 KB
- reference/classroom.md 360 B
- reference/cloudidentity.md 371 B
- reference/cloudsearch.md 365 B
- reference/contacts.md 5.3 KB
- reference/docs.md 15 KB
- reference/drive.md 19 KB
- reference/driveactivity.md 370 B
- reference/drivelabels.md 365 B
- reference/forms.md 3.3 KB
- reference/gmail.md 14 KB
- reference/groupsmigration.md 376 B
- reference/groupssettings.md 373 B
- reference/keep.md 343 B
- reference/licensing.md 358 B
- reference/meet.md 2.4 KB
- reference/postmaster.md 361 B
- reference/reseller.md 356 B
- reference/script.md 350 B
- reference/searchconsole.md 5.1 KB
- reference/sheets.md 15 KB
- reference/slides.md 2.6 KB
- reference/tasks.md 4.8 KB
- reference/vault.md 347 B
- reference/workspaceevents.md 377 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 163 lines · 92 tokens per session scan A 5489d2482969
google-workspace is a skill published in the GitHub repository bakissation/mcp-google-multi (15 stars, last pushed 2d ago), licensed MIT. It adds 92 tokens to every session and 2,086 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-14.
Other skills, from other repositories
managing-google-workspace
Manages Google Workspace operations across 12 services (Gmail, Drive, Calendar, Docs, Sheets, Slides, Forms, Tasks, Contacts, Chat, Apps Script, Custom Search). Supports MCP tools or CLI via uvx workspace-mcp --cli. Provides tool routing, workflows, and parameter guidance for 114 tools. Triggers for "check my email"…
calendar-scheduling
Use when a product needs a booking surface — a pick-a-slot page, a Cal.com/Calendly embed, or real availability plus the confirmed meeting written to Google/Outlook — or when fixing double-booking, DST drift, or orphaned reschedule events. NOT calendar CRUD with no booking surface (that is google-workspace), NOT the…
gmail-tool
Gmail integration tool. Performs unread check, body retrieval, and draft creation via Gmail API using OAuth2. Use when: Use when: you need to check received emails, read email bodies, create drafts, search the inbox, or work with labeled emails.
kalender
Calendar skill with user-adaptive backend selection (Flag 3). Default: local SQLite store. Optional: Google Calendar MCP, Routinika or UpToday as backend — controlled via assist/prefs.json. Without preference the LLM asks the user interactively.
gmail
Send, read, and manage Gmail messages and email attachments automatically.
mail-operations
Use this skill whenever the user wants to interact with email. This includes reading inbox, sending emails, replying, searching messages, managing labels and categories, downloading attachments, setting up auto-reply rules, or triggering agents to handle incoming emails. Supports Gmail, Outlook, and IMAP/SMTP (QQ…