ScopeGate
Give each MCP agent only the Google Drive, Gmail, or Calendar scopes it needs instead of one over-powered OAuth connection.
Overview
ScopeGate is a MCP server for the Ship phase that enforces per-agent permission scopes on Google Drive, Gmail, and Calendar for MCP clients.
What is this MCP server?
- Per-agent permission scopes for Google Drive, Gmail, and Calendar via hosted ScopeGate endpoint
- API key issued at scopegate.dev after you connect services and define permission boundaries
- Streamable-http remote at mcp.scopegate.cloud with secret API key variable
- Granular gateway pattern so multiple agents do not share one blanket Google token
- Server version 1.0.0 per published schema
- Supported Google surfaces listed: Drive, Gmail, Calendar
- API key marked isSecret and isRequired on remote
Community signal: 14 GitHub stars.
What problem does it solve?
One shared Google connection for every agent grants more access than you intend and is hard to revoke per workflow.
Who is it for?
Solo builders running several MCP agents against Google Workspace who need different permission sets per agent or per project.
Skip if: Builders who only need read-only public APIs, self-hosted Google service accounts with fixed IAM, or non-Google data sources.
What do I get? / Deliverables
Each agent gets a ScopeGate endpoint with defined scopes so Google Workspace access stays least-privilege and auditable at the gateway.
- Scoped MCP endpoint per agent configuration
- Reduced Google Workspace blast radius for agent tools
- Documented permission boundaries at the gateway
Recommended MCP Servers
Journey fit
How it compares
Permission gateway MCP remote, not a Google API tutorial skill or full SSO product.
Common Questions / FAQ
Who is io.github.alifanov/scopegate for?
Developers shipping MCP agents that touch Google Drive, Gmail, or Calendar and want scoped credentials per agent instead of one mega-token.
When should I use io.github.alifanov/scopegate?
Use it during security hardening before production agents send email, read Drive files, or modify Calendar on your behalf.
How do I add io.github.alifanov/scopegate to my agent?
Create an account at scopegate.dev, connect Google services, define permissions, copy the endpoint API key, and register https://mcp.scopegate.cloud/{api_key} as a streamable-http MCP remote.