Google Gmail

Connect your company's Gmail to Cakewalk so agents can read, draft and manage email through the gateway. Setup is one admin step: authorize Cakewalk's app in the Google Admin Console.

Connect your company's Gmail to Cakewalk's MCP Gateway. Every agent tool call against Gmail passes through the gateway and is evaluated against your Policies.

Cakewalk connects to Gmail through one Cakewalk owned OAuth app with a fixed client ID. Before employees can connect, a Google Workspace super admin authorizes that client ID in the Google Admin Console. There are no credentials to create or paste: once the app is authorized, each employee signs in and approves access, and Google issues the access token.

This is what sets the Google Connections apart from most of the catalog. Servers like Stripe and Atlassian register a new OAuth client automatically on each connection, so there is nothing to authorize ahead of time. Gmail uses a fixed Cakewalk client ID, which is what lets your company's Workspace admin trust it once and scope what it can access.

Requirements

• A Google Workspace super admin who can open the Google Admin Console.

• A Cakewalk Admin who can enable the Connection.

Step 1: Enable the Connection in Cakewalk

1. Sign in to Cakewalk as an Admin at https://app.getcakewalk.io.

2. Go to All Connections.

3. Find Gmail and enable it for your company.

Step 2: Authorize Cakewalk in the Google Admin Console

This authorization is one time for all Google Connections. If your Workspace admin already authorized Cakewalk's Google client ID for another Google product (Google Drive, Google Calendar, Google Chat or the Google People API), it is already trusted and you can skip to Step 4. If you restricted it to specific scopes, add this product's scopes from Step 3.

Managed Workspace accounts cannot grant access to a third party app until an admin authorizes it. Authorize Cakewalk's app once for the whole domain.

1. Sign in at admin.google.com as a super admin.

2. Go to Security, then Access and data control, then API controls.

3. Select Manage third-party & internal app access.

4. Select Add app, then OAuth App Name Or Client ID.

5. Search for Cakewalk's published Gmail client ID and select it:

   515823586954-dg0ptg9no12bjhb3g2j1gjnmrefdgh5r.apps.googleusercontent.com

6. Choose the organizational units that may use the Connection. The default is All Users.

7. Set the access level to Trusted.

8. Select Configure and confirm.

Step 3: Restrict to Specific Scopes (Optional)

Instead of Trusted, you can hold Cakewalk's app to a named set of scopes. In step 7 above, choose Specific Google services or scopes, then add the scopes the Gmail MCP server requires:

Scope	Access
https://www.googleapis.com/auth/gmail.readonly	Read messages, attachments and labels
https://www.googleapis.com/auth/gmail.compose	Create drafts and send messages

The Google Workspace MCP servers are in Google's Developer Preview Program, so this scope set can change before general availability.

Step 4: Connect From Cakewalk

No credentials change hands. Once the app is authorized, employees connect themselves:

1. From an agent platform connected to Cakewalk, an employee signs in to Google and approves access.

2. Google issues the access token scoped to that employee's own mailbox.

Verifying It Works

The Gmail Connection card flips to Active on All Connections. From an agent platform connected to Cakewalk, ask the agent to find a recent email. If Gmail returns results, the Connection is live.

Troubleshooting

• Sign in is blocked or access is denied: confirm the Cakewalk client ID is listed under Manage third-party & internal app access in the Google Admin Console and set to Trusted, or that the scopes you allowed cover the ones above.

• Access works for some employees but not others: check that their organizational unit is included in the app authorization. The default is All Users.

• Each employee sees only their own mail. Cakewalk's app carries no standing access of its own; access is scoped to the account that signs in.

Learn More

• Control which third-party & internal apps access Google Workspace data

• Use the Gmail API