Skip to content

feat(skill): add /add-gdrive-tool — Google Drive MCP via OneCLI#2430

Open
abarbaccia wants to merge 1 commit into
nanocoai:mainfrom
abarbaccia:skill/add-gdrive-tool
Open

feat(skill): add /add-gdrive-tool — Google Drive MCP via OneCLI#2430
abarbaccia wants to merge 1 commit into
nanocoai:mainfrom
abarbaccia:skill/add-gdrive-tool

Conversation

@abarbaccia

Copy link
Copy Markdown

Summary

Adds /add-gdrive-tool as a sibling skill to /add-gmail-tool and /add-gcal-tool. Wires @piotr-agier/google-drive-mcp into agent containers using the same OneCLI stub-credential pattern the Gmail and Calendar siblings use — containers see onecli-managed placeholder tokens; the OneCLI gateway intercepts outbound googleapis.com calls and injects the real OAuth bearer at request time.

  • Covers Drive + Docs + Sheets + Slides
  • Independent install/uninstall — does not bundle with Gmail/Calendar
  • Notes the drive.readonly (sensitive scope) vs drive.file (non-sensitive) tradeoff so personal-use installs avoid Google's app-verification flow
  • No TOOL_ALLOWLIST edit needed — relies on the existing auto-derive from mcpServers in providers/claude.ts

Test plan

  • OneCLI: configure provider with web OAuth client, connect via UI
  • Pre-flight onecli apps get --provider google-drive shows connection: connected
  • ~/.drive-mcp/{gcp-oauth.keys.json,credentials.json} created with onecli-managed stubs
  • mount-allowlist.json includes ~/.drive-mcp
  • Container rebuilds with DRIVE_MCP_VERSION=2.2.0
  • Per-group container.json wires drive MCP server + .drive-mcp mount
  • Agent successfully calls mcp__drive__list-files from a wired chat
  • Removal steps cleanly revert all changes

Verified end-to-end on a personal install before submitting.

🤖 Generated with Claude Code

Wires @piotr-agier/google-drive-mcp into agent containers using the
same OneCLI stub-credential pattern that /add-gmail-tool and
/add-gcal-tool use. Containers see "onecli-managed" placeholder
tokens; the gateway intercepts outbound googleapis.com calls and
injects the real OAuth bearer at request time.

Covers Drive + Docs + Sheets + Slides.

Sibling skill, not a combined Workspace install — installs and removes
independently of Gmail and Calendar.

Note: drive.readonly is a sensitive Google scope and triggers
verification in Production OAuth. drive.file (non-sensitive) is the
no-verification path for personal-use installs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant