Google Gmail
Generally AvailableWith OAuth2 authorization, an AI agent can search messages, read threads, compose drafts, and send email on your behalf.
- Google Workspace
- Productivity
- Authentication
- OAuth 2.0
- Hosting
- Vendor-hosted endpoint
- Required scopes
- 2
- Data actions
- Read and write
How it works
Every agent request passes through Ferentin policy before it reaches Google Gmail.
- AI agentAsks for something
- Ferentin policies
- OAuth 2.0 consent
- Granular scope selection
- Audit logging
- Google Gmail MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What agents can do
23 tools · you choose which ones agents may callSearch and browse what exists, without opening the content itself.
- List draft emails
- List labels
Permissions requested
The OAuth 2.0 scopes Google Gmail asks you to approve when you connect.
| Scope | Access |
|---|---|
| https://www.googleapis.com/auth/gmail.modify | Elevated |
| https://www.googleapis.com/auth/gmail.compose | Not rated |
Before you connect
- Google does not support Dynamic Client Registration (DCR) — each tenant must create its own OAuth client in Google Cloud Console.
- Use access_type=offline to receive a refresh token for long-lived access.
- The Gmail API must be enabled on the same Google Cloud project as the OAuth client.
About Google Gmail
Gmail is Google's email service, part of Google Workspace, for sending, receiving, and organizing messages.
Frequently asked about Google Gmail
- What can AI agents do with Google Gmail through Ferentin?
- Ferentin exposes 23 Google Gmail MCP tools to your AI agents, grouped as Discover (2 tools), Access (2 tools), Manage (4 tools) and Collaborate (9 tools). Every call is checked against your Ferentin policies before it reaches Google Gmail.
- How is Google Gmail access secured?
- Requests through the Google Gmail integration are covered by OAuth 2.0 consent, granular scope selection and audit logging. These controls are applied by Ferentin, not by Google Gmail, so they hold across every connected agent.
- What permissions does the Google Gmail integration require?
- The Google Gmail integration requests 2 OAuth 2.0 scopes: https://www.googleapis.com/auth/gmail.modify (elevated access); https://www.googleapis.com/auth/gmail.compose
- How do I connect Google Gmail to Ferentin?
- Open the Ferentin admin console, add Google Gmail as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the Google Gmail integration generally available?
- Yes. The Google Gmail integration is generally available on Ferentin, including the free tier.
Related integrations
4
Google Calendar
Calendar event management via Google Calendar. View availability, create and update events, schedule meetings.
Google People
Look up and manage contacts so your agent can find the right people and their details.
Google Drive
File storage and management via Google Drive. Search, browse, and manage files and folders with permission controls.
Google Chat
Read and post team messages so your agent can stay in the loop and respond in channels.