taylorwilsdon/google_workspace_mcp

v1.22.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP SaaS Integrations

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai g-suite gmail google-calendar google-chat google-docs

+14 more

google-drive google-forms google-sheets google-tasks google-workspace gsuite llm llm-tools mcp mcp-server model-context-protocol model-context-protocol-server model-context-protocol-servers workspace

Affected surfaces

auth breaking_upgrade deps

Summary

AI summary

Updates Authentication & Branding, Helm & Deployment, and Dependencies & Maintenance across a mixed release.

Full changelog

Release v1.22.0

This release broadens calendar conferencing support, adds new Gmail and Drive capabilities, and brings a round of deployment, security, and operability improvements. Highlights below, with full attribution to the contributors who made it happen.

Calendar

Third-party conferencing in manage_event (#865) — Previously manage_event could only attach native Google Meet links. You can now attach Zoom, Webex, or Teams meetings through Google's add-on conferencing mechanism, either via friendly helper fields (conference_provider, conference_uri, conference_passcode, conference_id) or by passing a raw conferenceData block for full control. Thanks to @DrFaust92.

Gmail

New forward_gmail_message tool (#455) — Forward existing messages, including attachments, with proper handling when an attachment download fails. Includes test coverage. Thanks to @jcwatson11.

Drive

Inline binary upload for create_drive_file (#869) — Create Drive files directly from binary content without a separate upload step.

Comments

Pagination for comment listing (#844) — list_comments now supports paginated retrieval via a max_comments parameter, with documentation added to the relevant docstrings. Thanks to @rhuss.

Authentication & Branding

OAuth consent-page branding via environment variables (#868) — Customize the FastMCP OAuth consent screen without forking or patching FastMCP. Set WORKSPACE_MCP_BRAND_NAME, WORKSPACE_MCP_BRAND_ICON_URL, and WORKSPACE_MCP_BRAND_WEBSITE_URL to replace the default name, logo, and website link. All values are optional; unset preserves upstream defaults.
Structured logging on token verification failures (#857) — Token verification failures now emit structured context, making auth issues considerably easier to diagnose in production. Thanks to @justreed.

Helm & Deployment

Persistent volume support (#859) — The chart now supports persistent volumes, with a guard against ReadWriteOnce persistence under multi-replica deployments. Thanks to @DrFaust92.
Dropped deprecated Ingress APIs (#858) — The chart no longer uses deprecated Ingress APIs and now requires Kubernetes >= 1.25. Thanks to @DrFaust92.

Forms

Valid setPublishSettings request body (#862) — Fixes the request body sent for form publish settings so the call succeeds against the Forms API. Thanks to @jfrantz-cw.

Dependencies & Maintenance

FastMCP bump and README updates (#867) — Updated FastMCP and refreshed documentation.
Security updates — Bumped PyJWT from 2.12.1 to 2.13.0 (#854) and resolved a batch of Dependabot security alerts by raising cryptography, pypdf, starlette, python-multipart, and pydantic-settings to their first patched versions. The full test suite passes.

New Contributors

A warm welcome to the contributors who made their first contribution in this release:

@rhuss in #844
@jcwatson11 in #455
@justreed in #857
@jfrantz-cw in #862

Full Changelog: https://github.com/taylorwilsdon/google_workspace_mcp/compare/v1.21.3...v1.22.0

Breaking Changes

Dropped deprecated Ingress APIs; Helm chart now requires Kubernetes >= 1.25

Security Fixes

Bumped PyJWT from 2.12.1 to 2.13.0; raised cryptography, pypdf, starlette, python-multipart, and pydantic-settings to patched versions resolving Dependabot alerts

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track taylorwilsdon/google_workspace_mcp

Get notified when new releases ship.

About taylorwilsdon/google_workspace_mcp

Comprehensive Google Workspace MCP server with full support for Google Calendar, Drive, Gmail, and Docs, Forms, Chats, Slides and Sheets over stdio, Streamable HTTP and SSE transports.

All releases →