Skip to content
Status

Google People

Connect Google profile, contacts, and directory data through Google's hosted People API MCP server.

You need a Google Cloud project and access to the Google Cloud console. To enable the People API, you need serviceusage.services.enable, normally through Service Usage Admin or Owner. To grant project roles, you need Project IAM Admin. Before you begin, have the application or security owner configure prompt and response screening for malicious content or prompt injection; Model Armor is one option.

Enable the People API

  1. Sign in to the Google Cloud console.
  2. In the console toolbar, use the resource selector to select the project that will own this configuration.
  3. Open APIs & Services > API Library.
  4. In Search for APIs & Services, search for People API.
  5. Open People API.
  6. Click Enable. If the API is already enabled, continue to the next section.

Grant MCP Tool User access

Repeat these steps for every person who will connect Google People.

  1. Open the project’s IAM page.
  2. Confirm that the same project is selected.
  3. Click Grant access.
  4. In New principals, enter the connecting user’s Google Account email.
  5. Click Select a role.
  6. Search for MCP Tool User.
  7. Select MCP Tool User.
  8. Click Save.

Google does not allow an OAuth consent screen to be removed after it is configured. Confirm that you are using the intended project before continuing.

  1. Open Google Auth platform > Branding.
  2. If the page shows Google Auth platform not configured yet, click Get Started.
  3. Under App Information, enter People API MCP Server in App name.
  4. Select a monitored User support email.
  5. Click Next.
  6. Under Audience, select Internal. If Internal is unavailable, select External.
  7. Click Next.
  8. Under Contact Information, enter a monitored Email address.
  9. Click Next.
  10. Under Finish, review the Google API Services User Data Policy with the application or security owner.
  11. With their approval, select I agree to the Google API Services: User Data Policy.
  12. Click Continue.
  13. Click Create.

If Google Auth platform was already configured, retain its approved Branding and Audience.

  1. Open Data Access.
  2. Click Add or Remove Scopes.
  3. Under Manually add scopes, paste these three scope URLs:
    • https://www.googleapis.com/auth/directory.readonly
    • https://www.googleapis.com/auth/userinfo.profile
    • https://www.googleapis.com/auth/contacts.readonly
  4. Click Add to Table.
  5. Click Update.
  6. Click Save.

If you selected External and the app is in Testing, add every connecting account:

  1. Open Audience.
  2. Under Test users, click Add users.
  3. Enter each connecting user’s email.
  4. Click Save.

Create the OAuth client

  1. Open Google Auth platform > Clients.
  2. Click Create client.
  3. In Application type, select Web application.
  4. In Name, enter a recognizable name such as Speakeasy AI Control Plane.
  5. Under Authorized redirect URIs, click + Add URI.
  6. In URIs, enter https://app.getgram.ai/mcp/remote_login_callback.

Prepare an approved secret store before the next step. The next dialog allows the client secret to be copied only once.

  1. Click Create. This opens OAuth 2.0 client created.

Copy the OAuth credentials

  1. In OAuth 2.0 client created, copy Client ID to the approved secret store.
  2. Under Client secrets, copy Client secret to the same store.
  3. Keep both values for connecting your credentials.
  4. Return to the Speakeasy AI Control Plane.

If you miss the one-time secret, delete it and create a new one before continuing.

Add the server in Speakeasy

  1. In the Speakeasy AI Control Plane sidebar, under Connect, select Sources.
  2. Click Add Source.
  3. Choose Custom remote server.
  4. On Add a custom remote MCP server, paste https://people.googleapis.com/mcp/v1 into Remote MCP server URL.
  5. Click Add server.

This creates the hosted MCP server and opens its Overview page.

Connect your credentials

  1. From Overview, open Settings.
  2. Under Authentication, click Configure Manually or Use Discovered when offered.
  3. In Attach Remote Identity Provider, set Client Type to Manual.
  4. Confirm that Redirect URI matches https://app.getgram.ai/mcp/remote_login_callback entered when you created the OAuth client.
  5. Paste the Client ID from the OAuth credentials.
  6. Paste the Client Secret (optional) from the OAuth credentials. Google requires this secret even though the field is labeled optional.
  7. In Scope (override), enter https://www.googleapis.com/auth/directory.readonly,https://www.googleapis.com/auth/userinfo.profile,https://www.googleapis.com/auth/contacts.readonly.
  8. Click Attach Identity Provider.
  9. At first connection, complete Google’s browser authorization with an account that has MCP Tool User access.

For billing, tool behavior, limits, and other details, see Google’s People API MCP documentation.