Docs · Connector reference

Google Workspace connector reference

Operations, inputs, troubleshooting, and questions for the Google Workspace connection. Policy decides each change before the credential is resolved, and the action record carries the result.

Set up and verify the Google Workspace connection

Choose one task and its account, and match the reads and actions on the overview page to it before granting provider permissions.
Prepare the connection settings from the overview page, connect the provider in Deixic, and choose which tools your agent can use.
Try a small task with a known result, and compare the returned identity and resource with what the account owner expects.
Configure approval for sensitive changes, review the destination and inputs, and check the result in the provider before expanding the workflow.

Information your agent can use

Resource	Record identity	Start with	Page coverage
Gmail profile	`emailAddress`	Top level	None configured
Gmail threads	`id`	Top level	Cursor
Drive files	`id`	Top level	Cursor
Calendar events	`id`	Top level	Cursor
Directory users	`id`	Top level	Cursor
Directory groups	`id`	Top level	Cursor
Directory memberships	`id`	Directory groups	Cursor
Directory roles	`roleId`	Top level	Cursor
Directory role assignments	`roleAssignmentId`	Top level	Cursor

Record identity: Match on these fields before joining or deduplicating results; where none is specified, check the returned record first.
Start with: Resolve the parent identifier first.
None configured: No page continuation is configured for this resource. Check the response and any provider limits before treating it as a complete inventory.
Cursor: Cursor pagination. Continue from the returned cursor; an initial page is not a complete inventory.

Supported operations

Review the inputs before granting an action to an agent. Required inputs must be supplied, optional inputs narrow the request, and provider permissions apply in addition to Deixic policy.

Action: Can change provider state; review the target and inputs, then retain the result to avoid repeating completed work.
Read: Retrieves information; check the returned scope and identifiers before use.

Operation	Effect	Approval	Provider permissions	Inputs
Email Create Draft	Action	By policy	None named	None named
Email Send	Action	Approval required	None named	None named
Calendar Create Event	Action	Approval required	None named	None named
Google Drive Document Create	Action	Approval required	https://www.googleapis.com/auth/documents, https://www.googleapis.com/auth/drive.file	1
Directory Get User	Read	By policy	https://www.googleapis.com/auth/admin.directory.user.readonly	1
Directory Suspend User	Action	Approval required	https://www.googleapis.com/auth/admin.directory.user	2
Sheets Values Get	Read	By policy	https://www.googleapis.com/auth/spreadsheets.readonly	4
Drive Files List	Read	By policy	https://www.googleapis.com/auth/drive.readonly	4
Drive Files Get	Read	By policy	https://www.googleapis.com/auth/drive.readonly	1
Drive Files Export	Read	By policy	https://www.googleapis.com/auth/drive.readonly	2
Gmail Messages List	Read	By policy	https://www.googleapis.com/auth/gmail.readonly	4
Gmail Messages Get	Read	By policy	https://www.googleapis.com/auth/gmail.readonly	2
Calendar Events List	Read	By policy	https://www.googleapis.com/auth/calendar.events	8
Directory List Users	Read	By policy	https://www.googleapis.com/auth/admin.directory.user.readonly	5
Directory Sign Out User	Action	Approval required	https://www.googleapis.com/auth/admin.directory.user.security	1
Directory List User Tokens	Read	By policy	https://www.googleapis.com/auth/admin.directory.user.security	1
Cloud Identity List Policies	Read	By policy	https://www.googleapis.com/auth/cloud-identity.policies.readonly	3
Directory List Domains	Read	By policy	https://www.googleapis.com/auth/admin.directory.domain.readonly	1
Reports List Activities	Read	By policy	https://www.googleapis.com/auth/admin.reports.audit.readonly	6
Directory Revoke User Token	Action	Approval required	https://www.googleapis.com/auth/admin.directory.user.security	2

Inputs by operation

Google Drive Document Create Action · approval required

Inputs for Google Drive Document Create
Input	Requirement	Accepted value
`title`	Required	stringMinimum characters: 1Maximum characters: 512

Directory Get User Read

Inputs for Directory Get User
Input	Requirement	Accepted value
`user_key`	Required	stringMinimum characters: 1Maximum characters: 254

Directory Suspend User Action · approval required

Inputs for Directory Suspend User
Input	Requirement	Accepted value
`suspended`	Required	boolean
`user_id`	Required	stringMinimum characters: 1Maximum characters: 128

Sheets Values Get Read

Inputs for Google Sheets Values Get
Input	Requirement	Accepted value
`major_dimension`	Optional	string; one of: ROWS, COLUMNS
`range`	Required	stringMinimum characters: 1Maximum characters: 512
`spreadsheet_id`	Required	stringMinimum characters: 1Maximum characters: 1024
`value_render_option`	Optional	string; one of: FORMATTED_VALUE, UNFORMATTED_VALUE, FORMULA

Drive Files List Read

Inputs for Google Drive Files List
Input	Requirement	Accepted value
`order_by`	Optional	stringMinimum characters: 1Maximum characters: 64
`page_size`	Optional	integerMinimum: 1Maximum: 100
`page_token`	Optional	stringMinimum characters: 1Maximum characters: 2048
`query`	Optional	stringMinimum characters: 1Maximum characters: 1024

Drive Files Get Read

Inputs for Google Drive Files Get
Input	Requirement	Accepted value
`file_id`	Required	stringMinimum characters: 1Maximum characters: 1024

Drive Files Export Read

Inputs for Google Drive Files Export
Input	Requirement	Accepted value
`file_id`	Required	stringMinimum characters: 1Maximum characters: 1024
`mime_type`	Required	string; one of: text/plain, text/csv, text/markdown, text/html

Gmail Messages List Read

Inputs for Google Gmail Messages List
Input	Requirement	Accepted value
`label_ids`	Optional	arrayMaximum items: 10
`max_results`	Optional	integerMinimum: 1Maximum: 50
`page_token`	Optional	stringMinimum characters: 1Maximum characters: 2048
`query`	Optional	stringMinimum characters: 1Maximum characters: 1024

Gmail Messages Get Read

Inputs for Google Gmail Messages Get
Input	Requirement	Accepted value
`format`	Optional	string; one of: metadata, full, minimal
`message_id`	Required	stringMinimum characters: 1Maximum characters: 256

Calendar Events List Read

Inputs for Google Calendar Events List
Input	Requirement	Accepted value
`calendar_id`	Optional	stringMinimum characters: 1Maximum characters: 1024
`max_results`	Optional	integerMinimum: 1Maximum: 250
`order_by`	Optional	string; one of: startTime, updated
`page_token`	Optional	stringMinimum characters: 1Maximum characters: 2048
`q`	Optional	stringMinimum characters: 1Maximum characters: 512
`single_events`	Optional	boolean
`time_max`	Optional	stringMinimum characters: 1Maximum characters: 64
`time_min`	Required	stringMinimum characters: 1Maximum characters: 64

Directory List Users Read

Inputs for Directory List Users
Input	Requirement	Accepted value
`customer`	Required	stringMinimum characters: 1Maximum characters: 64
`maxResults`	Optional	integerMinimum: 1Maximum: 500
`pageToken`	Optional	stringMinimum characters: 1Maximum characters: 2048
`projection`	Optional	string; one of: basic, fullMinimum characters: 1Maximum characters: 8
`query`	Optional	stringMinimum characters: 1Maximum characters: 512

Directory Sign Out User Action · approval required

Inputs for Directory Sign Out User
Input	Requirement	Accepted value
`userKey`	Required	stringMinimum characters: 1Maximum characters: 320

Directory List User Tokens Read

Inputs for Directory List User Tokens
Input	Requirement	Accepted value
`userKey`	Required	stringMinimum characters: 1Maximum characters: 320

Cloud Identity List Policies Read

Inputs for Cloud Identity List Policies
Input	Requirement	Accepted value
`filter`	Optional	stringMinimum characters: 1Maximum characters: 512
`pageSize`	Optional	integerMinimum: 1Maximum: 100
`pageToken`	Optional	stringMinimum characters: 1Maximum characters: 2048

Directory List Domains Read

Inputs for Directory List Domains
Input	Requirement	Accepted value
`customer`	Required	stringMinimum characters: 1Maximum characters: 64

Reports List Activities Read

Inputs for Reports List Activities
Input	Requirement	Accepted value
`applicationName`	Required	string; one of: access_transparency, admin, calendar, chat, drive, gcp, gmail, groups, groups_enterprise, login, meet, mobile, rules, saml, token, user_accounts, context_aware_access, chrome, keep, vault, gemini_in_workspace_apps, classroom, directory_sync, ldap, access_evaluation
`endTime`	Required	stringMinimum characters: 20Maximum characters: 40
`eventName`	Optional	stringMinimum characters: 1Maximum characters: 128
`maxResults`	Optional	integerMinimum: 1Maximum: 500
`pageToken`	Optional	stringMinimum characters: 1Maximum characters: 2048
`startTime`	Required	stringMinimum characters: 20Maximum characters: 40

Directory Revoke User Token Action · approval required

Inputs for Directory Revoke User Token
Input	Requirement	Accepted value
`clientId`	Required	stringMinimum characters: 1Maximum characters: 256
`userKey`	Required	stringMinimum characters: 1Maximum characters: 320

When the Google Workspace task does not produce the expected result

Connected, but the expected data is missing

Check the identity behind the oauth connection and its access to the specific resource; a successful connection does not establish access to every object.

Resolve parent resources first: Directory groups. A matching display name is not enough for a child lookup.

The answer covers only part of the data

Check the resource’s page coverage, query filters, and result limit, and have the agent state the account and time window it inspected, so a partial response yields a scoped answer.

The agent keeps doing the same work

Inspect the action history for repeated targets and inputs, keep the successful result’s identifiers with the task, and refresh a lookup only when the information changed.

A change is waiting or failed

Check whether the call awaits approval, was rejected by policy, lacks an input, or failed at the provider, and after a timeout inspect the destination before repeating a write.

See how an action proceeds and how to review an approval.

Questions about the Google Workspace connector

Can I use my existing agent with Google Workspace?

Yes: connect your agent to Deixic through MCP, choose which connected tools it can use, and Deixic checks calls routed through its gateway; Dex is available if your team also wants an agent.

Can an agent change data in Google Workspace?

This connector supports 6 actions, listed on its overview page. Configure a connection and choose the tools and provider permissions your task needs; an available action is not permission for every agent to run it, and Deixic policy and any required approval still apply to calls through the gateway.

What do I need to connect Google Workspace?

Prepare Client ID, Client secret, Access token, Refresh token; the connection uses OAuth, and the connected identity’s provider permissions determine which resources it can access.

Does connecting Google Workspace keep every answer up to date?

No: an earlier answer is still an earlier answer, so for a decision that depends on current state, have the agent refresh the source and retain the lookup time, and save stable instructions separately from facts that can change.

Google Workspace connector overview Docs All connectors