GAM MCP Server

Administer Google Workspace using the GAM command-line tool.

Google Workspace administration via GAM CLI, ready for Claude Desktop and Model Context Protocol (MCP).

- GAM: Install and authenticateGAMon your system.

# Clone or copy this repo cd gam-mcp-server npm install npm run build

GAM_PATH=/path/to/gam node dist/index.js

{ "mcpServers": { "gam-workspace": { "command": "node", "args": ["/absolute/path/to/gam-mcp-server/dist/index.js"], "env": { "GAM_PATH": "/path/to/gam" } } } }

- gam_list_users: List users (domain, query, maxResults)
- gam_get_user: Get user details (email)
- gam_create_user: Create user (email, firstName, lastName, password, orgUnit)
- gam_update_user: Update user (email, updates)
- gam_suspend_user/gam_unsuspend_user: (email)
- gam_move_user_orgunit: (email, orgUnitPath)

- gam_list_groups: List groups (domain, maxResults)
- gam_get_group: Get group details (groupEmail)
- gam_create_group: Create group (groupEmail, groupName, description)
- gam_add_group_member/gam_remove_group_member: (groupEmail, memberEmail, role)

- gam_list_orgunits: List OUs
- gam_move_user_orgunit: Move user between OUs

{ "method": "tools/call", "params": { "name": "gam_list_users", "arguments": { "maxResults": 10 } } }

{ "method": "tools/call", "params": { "name": "gam_get_user", "arguments": { "email": "user@example.com" } } }

{ "method": "tools/call", "params": { "name": "gam_create_group", "arguments": { "groupEmail": "team@example.com", "groupName": "Team" } } }

- GAM not found: SetGAM_PATHor addgamto your PATH.
- Authentication errors: Rungam oauth create.
- Quota/rate limit: Wait and retry; see Google Admin API quotas.
- Parameter validation: All inputs are validated; see error messages for details.

- Only whitelisted GAM commands are allowed.
- All parameters are validated and sanitized.
- No arbitrary command execution.
- Logs redact sensitive data.
- Rate limiting and error handling are built-in.

Add new tools insrc/tools/and export them insrc/tools/index.ts.

Interact with AWS resources using Single Sign-On (SSO). Supports SSO login, listing accounts/roles, and executing AWS CLI commands.

Deploy and manage apps on your cloud from coding agents. Create environments, choose regions, configure infrastructure, and monitor jobs. Supports OAuth 2.0 with Dynamic Client Registration, RBAC permissions, and approval workflows for production environments.

Access Google's security products and services, including Chronicle, SOAR, Threat Intelligence (GTI), and Security Command Center (SCC).

MCP Remote with Okta/Adobe IMS Authentication

A remote MCP server that uses Adobe IMS/Okta for authentication.

Administer Keycloak by managing users, realms, roles, and other resources through an LLM interface.

Allows AI models to interact with your Okta environment to manage and analyze resources, designed for IAM engineers, security teams, and administrators.

Interact with Okta's user management system for comprehensive user, group, and onboarding automation.

A RESTful API to programmatically interact with the Opal Security platform.

A production-ready MCP server on Cloudflare Workers with GitHub OAuth and Fantasy Premier League integration.

A self-hostable MCP server for Cloudflare Workers with OAuth login support, using Cloudflare KV for storage.