← Back to Skills Marketplace
18425
Downloads
21
Stars
0
Active Installs
10
Versions
Install in OpenClaw
/install google-workspace-admin
Description
Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for users, groups, organizational units, roles, and domain settings. Only connect with a least-privileged Google admin account, restrict OAuth scopes to the specific resources needed, and revoke the connection after use. All write operations require explicit user approval showing the exact HTTP method, endpoint path, and target resource identifier before execution. Use this skill only when users need Google Workspace administration. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login; default to read and list calls, and confirm every write or new connection with the user.
Usage Guidance
Install only if you intend to let an agent administer Google Workspace through Maton. Use a least-privileged admin account, prefer OAuth over API keys, review the exact method, endpoint, target, payload, and consequences before approving any write, and revoke unused connections after the task is complete.
Capability Assessment
Credentials
Network access, a Maton account, OAuth, and optional raw HTTPS fallback are proportionate for this API gateway use, and the fallback is described as only for environments where the CLI cannot be installed.
Install Mechanism
Installation uses the documented Maton CLI via npm or Homebrew, with no bundled executable scripts in the artifact.
Instruction Scope
Instructions scope use to Google Workspace Admin, default to read/list calls, require explicit confirmation for connection creation and all writes, and warn that API-returned content is untrusted data.
Persistence & Privilege
OAuth/API credentials are persisted by the Maton profile and operating-system credential store; this is disclosed, purpose-aligned, and paired with instructions not to inspect, print, export, or persist secrets elsewhere.
Purpose & Capability
The skill can read and modify Google Workspace users, groups, organizational units, roles, and domain settings, which is high-impact but directly matches its stated administrative purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install google-workspace-admin - After installation, invoke the skill by name or use
/google-workspace-admin - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
CLI-first rewrite with the Maton SDK examples; clarify that the CLI and SDKs keep separate credential stores, and reword webhook egress warnings
v1.1.0
CLI-first rewrite: the maton CLI with OAuth login is the documented path, every example is a maton command, SDK examples added, and the raw HTTP fallback feeds the key on stdin instead of reading it from the environment
v1.0.7
- Stricter security: All write operations now require explicit user approval showing the exact HTTP method, endpoint path, and resource identifier before execution.
- Documentation clarified: Description, permissions, and security sections updated for greater emphasis on least-privileged access and connection targeting.
- API usage guidance improved: Users must always specify the `Maton-Connection` header to prevent misrouted admin requests.
- Endpoints restricted: Only documented API endpoints are supported; constructing arbitrary paths is no longer allowed.
- Warnings expanded: All high-impact actions must show detailed consequences and require user confirmation.
v1.0.6
- Updated documentation to emphasize the high-impact, write-capable nature of this integration.
- Added strong warnings to use least-privilege admin accounts and OAuth scopes, and to revoke connections when not needed.
- Clarified that all write operations (create, update, delete) require explicit user approval with specific resource identification and summary of consequences.
- Instructed users to confirm resource details via read operations before proceeding with any administrative change.
- Expanded guidance on security, permissions, and the irreversible impact of admin operations across the domain.
v1.0.5
- Changed all API endpoints from gateway.maton.ai and ctrl.maton.ai to api.maton.ai for a unified base URL.
- Updated connection management instructions to use api.maton.ai, including listing, creating, and deleting connections.
- Clarified security and permission details; emphasized explicit user approval before running write operations.
- Removed LICENSE.txt from the project files.
v1.0.4
- Added a homepage field (https://maton.ai) to the skill metadata.
- No changes to code or functionality.
v1.0.3
- Added new metadata fields under the "metadata" section for better skill description and requirements clarity.
- Introduced a "clawdbot" section specifying a required environment variable (MATON_API_KEY) and an emoji indicator.
- No core functionality changes; documentation and metadata improvements only.
v1.0.2
No changes detected in this release.
- Version number incremented to 1.0.2
- No file or documentation changes identified
v1.0.1
- Added a note to the description directing users to use the api-gateway skill for other third party apps.
- Replaced all bash/curl CLI examples with Python code snippets using urllib and os libraries.
- Updated authentication header examples to use the $MATON_API_KEY environment variable in shell snippets.
- No changes to the API or underlying functionality; documentation improvements only.
v1.0.0
Initial release of Google Workspace Admin SDK integration.
- Manage users, groups, organizational units, and domain settings via a unified API gateway.
- Supports managed OAuth authentication and multiple account connections.
- Includes detailed API reference and example curl commands for common user and group operations.
- Requires a Maton API key and offers tools to manage OAuth connections.
- Provides features such as user creation, group membership management, and organizational unit administration.
Metadata
Frequently Asked Questions
What is google-workspace-admin?
Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for users, groups, organizational units, roles, and domain settings. Only connect with a least-privileged Google admin account, restrict OAuth scopes to the specific resources needed, and revoke the connection after use. All write operations require explicit user approval showing the exact HTTP method, endpoint path, and target resource identifier before execution. Use this skill only when users need Google Workspace administration. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login; default to read and list calls, and confirm every write or new connection with the user. It is an AI Agent Skill for Claude Code / OpenClaw, with 18425 downloads so far.
How do I install google-workspace-admin?
Run "/install google-workspace-admin" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is google-workspace-admin free?
Yes, google-workspace-admin is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does google-workspace-admin support?
google-workspace-admin is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created google-workspace-admin?
It is built and maintained by byungkyu (@byungkyu); the current version is v1.2.0.
More Skills