Google People API

Connect your company's Google directory and contacts to Cakewalk through the Google People API MCP server so agents can read profiles and look up people. Setup is one admin step: authorize Cakewalk's

Connect your company's Google directory and contacts to Cakewalk's MCP Gateway through the Google People API MCP server. Every agent tool call passes through the gateway and is evaluated against your Policies.

Cakewalk connects through one Cakewalk owned OAuth app with a fixed client ID, the same app that serves every Google Workspace Connection. Before employees can connect, a Google Workspace super admin authorizes that client ID in the Google Admin Console. There are no credentials to create or paste: once the app is authorized, each employee signs in and approves access, and Google issues the access token.

This is what sets the Google Connections apart from most of the catalog. Servers like Stripe and Atlassian register a new OAuth client automatically on each connection, so there is nothing to authorize ahead of time. The Google People API server uses a fixed Cakewalk client ID, which is what lets your company's Workspace admin trust it once and scope what it can access.

Requirements

• A Google Workspace super admin who can open the Google Admin Console.

• A Cakewalk Admin who can enable the Connection.

Step 1: Enable the Connection in Cakewalk

1. Sign in to Cakewalk as an Admin at https://app.getcakewalk.io.

2. Go to All Connections.

3. Find Google People API and enable it for your company.

Step 2: Authorize Cakewalk in the Google Admin Console

This authorization is one time for all Google Connections. If your Workspace admin already authorized Cakewalk's Google client ID for another Google product (Gmail, Google Drive, Google Calendar or Google Chat), it is already trusted and you can skip to Step 4. If you restricted it to specific scopes, add this product's scopes from Step 3.

Managed Workspace accounts cannot grant access to a third party app until an admin authorizes it. Authorize Cakewalk's app once for the whole domain.

1. Sign in at admin.google.com as a super admin.

2. Go to Security, then Access and data control, then API controls.

3. Select Manage third-party & internal app access.

4. Select Add app, then OAuth App Name Or Client ID.

5. Search for Cakewalk's published Google client ID and select it. The Google Workspace Connections all share one client ID, so if you already authorized it for another Google Connection it is listed here:

   515823586954-dg0ptg9no12bjhb3g2j1gjnmrefdgh5r.apps.googleusercontent.com

6. Choose the organizational units that may use the Connection. The default is All Users.

7. Set the access level to Trusted.

8. Select Configure and confirm.

Step 3: Restrict to Specific Scopes (Optional)

Instead of Trusted, you can hold Cakewalk's app to a named set of scopes. In step 7 above, choose Specific Google services or scopes, then add the scopes the Google People API MCP server requires:

Scope	Access
https://www.googleapis.com/auth/directory.readonly	Read directory information about people in your company
https://www.googleapis.com/auth/userinfo.profile	Read the signed in user's profile
https://www.googleapis.com/auth/contacts.readonly	Read contacts

The Google Workspace MCP servers are in Google's Developer Preview Program, so this scope set can change before general availability.

Step 4: Connect From Cakewalk

No credentials change hands. Once the app is authorized, employees connect themselves:

1. From an agent platform connected to Cakewalk, an employee signs in to Google and approves access.

2. Google issues the access token scoped to that employee's own profile, contacts and directory view.

Verifying It Works

The Google People API Connection card flips to Active on All Connections. From an agent platform connected to Cakewalk, ask the agent to look up a colleague in the directory. If the server returns results, the Connection is live.

Troubleshooting

• Sign in is blocked or access is denied: confirm the Cakewalk client ID is listed under Manage third-party & internal app access in the Google Admin Console and set to Trusted, or that the scopes you allowed cover the ones above.

• Access works for some employees but not others: check that their organizational unit is included in the app authorization. The default is All Users.

• Each employee sees only the directory and contacts their account can see. Cakewalk's app carries no standing access of its own; access is scoped to the account that signs in.

Learn More

• Control which third-party & internal apps access Google Workspace data

• Configure the People API MCP server