Overview
Google Workspace is where most organizations handle email, documents, spreadsheets, calendars, and communication. The ClawStaff Google Workspace integration connects your Claws to all of it through a single OAuth flow: Gmail, Calendar, Drive, Docs, Sheets, Slides, Chat, Forms, Tasks, Contacts, Classroom, Apps Script, and Groups. You choose exactly which services each Claw can access and whether it gets read-only or full read-write permissions for each one.
This is not a single-purpose integration. It is a configurable bridge between your AI agents and the entire Google ecosystem. A Claw that handles support emails only needs Gmail. A Claw that manages project documentation might need Drive, Docs, and Sheets. A Claw that coordinates team schedules needs Calendar and Chat. You build the permission set that matches each Claw’s role, no more, no less.
Granular Permission Controls
The Google Workspace integration gives you per-service read/write toggles. During the connection setup, you select which Google services to enable and choose the access level for each:
- Read-only. The Claw can view data but cannot modify, create, or delete anything. Use this for monitoring, reporting, and analysis workflows.
- Full access. The Claw can read, create, modify, and delete data. Use this for automation workflows where the Claw needs to take action: sending emails, creating documents, updating spreadsheets.
Only the OAuth scopes you select are requested from Google. If you enable Gmail (read-only) and Sheets (full access), your Claw gets gmail.readonly and spreadsheets scopes, nothing else. This is OAuth scope minimization in practice: your Claw never has more access than it needs.
What Your Claw Can Do
Email automation with Gmail. Read incoming emails, draft and send responses, apply labels, search across your inbox, and manage threads. Claws can handle support inboxes, triage notifications, and compose context-aware replies using data from your other connected tools. Learn more →
Calendar management. Read schedules, create events, check availability, send invitations, and manage recurring meetings. Claws can coordinate scheduling across team members, suggest meeting times, and post agenda summaries. Learn more →
File management with Drive. Browse folders, read file metadata, upload and organize files, and search across your Drive. Claws can find relevant documents, organize project files, and manage file sharing permissions. Learn more →
Document creation with Docs. Read and create Google Docs with full formatting: headings, lists, tables, and links. Claws can generate reports, draft proposals, and maintain living documentation that updates automatically. Learn more →
Spreadsheet automation with Sheets. Read data, write to cells, create formulas, and manage sheets. Claws can process data, generate reports, update trackers, and build dashboards from data across your other tools. Learn more →
Presentation building with Slides. Read and create slide decks, add text and images, and format layouts. Claws can generate status presentations, compile weekly reports into slides, and create client-facing decks. Learn more →
Team communication with Chat. Read and send messages in Google Chat spaces, respond in threads, and participate in team conversations. Claws can serve as interactive assistants in your Chat spaces. Learn more →
Form response processing with Forms. Read form structures and responses. Claws can process survey results, analyze feedback, and trigger workflows based on new form submissions. Learn more →
All Services
Beyond the services with dedicated pages, the Google Workspace integration also supports:
- Tasks. Read and manage Google Tasks lists and items. Claws can create tasks from other tools, mark tasks complete, and sync task lists with your project management workflows.
- Contacts. Read and manage Google Contacts. Claws can look up contact information, create new contacts from form submissions, and keep contact data in sync across your tools.
- Classroom. Read course rosters and assignments for educational institutions. Claws can monitor classroom activity, compile grade reports, and assist with course administration.
- Apps Script. Read and manage Google Apps Script projects. Claws can interact with custom automation scripts and extend Google Workspace functionality.
- Groups. Read and manage Google Groups membership. Claws can check group membership for access control decisions, add members from onboarding workflows, and sync group rosters with other systems.
Who Can Reach Your Claw
Every Claw connected to Google Workspace has channel-level whitelisting that controls exactly who can interact with it. This works alongside three Claw scoping levels:
Private Claw. Only the creator can interact with the Claw. This is a personal AI assistant that reads your Gmail, manages your Calendar, and organizes your Drive. Nobody else in your organization can communicate with it or access its outputs. Use this for personal productivity workflows like inbox triage, meeting prep, and document drafting.
Team Claw. Only whitelisted team members can interact. The Claw serves a specific team (processing shared inboxes, managing team calendars, and maintaining team documentation) but the rest of the organization cannot access it. Whitelist by email addresses or Google Groups membership.
Organization-wide Claw. Any member of your organization can interact. The Claw serves as a company-wide resource: an HR assistant that answers policy questions via Chat, a knowledge bot that searches Drive for anyone, or an org-wide calendar coordinator. Still whitelisted to your company domain (e.g., only @company.com accounts).
For each Google service, whitelisting works differently:
- Gmail. Whitelist by email addresses, domains, or distribution lists. Only emails from whitelisted senders are processed.
- Calendar. Whitelist by calendar owners or specific calendar IDs. The Claw only accesses calendars explicitly shared with it.
- Chat. Whitelist by specific users or Chat spaces. The Claw only responds in whitelisted spaces.
- Drive/Docs/Sheets/Slides. Whitelist by shared folders or documents. The Claw only accesses files explicitly shared with the integration.
Security
- OAuth scope minimization. Only the scopes you select during setup are requested from Google. A Claw that needs read-only Gmail access never receives write permissions for Drive.
- Per-service granular permissions. Each Google service is independently configured with read-only or full access. You build the exact permission set each Claw needs.
- Tokens encrypted at rest. Google OAuth tokens are stored with AES-256 encryption. Tokens are decrypted only at runtime, inside the ClawCage container.
- Automatic token refresh. ClawStaff handles Google’s token expiry and refresh cycle transparently. Your connection stays active without manual re-authorization.
- ClawCage isolation. Each Claw runs in its own Docker container. Google credentials are injected at runtime and are not accessible to other Claws.
- Audit logging. Every Google API call made by your Claw is logged and available in the ClawStaff dashboard.
- Revoke anytime. Disconnect from the ClawStaff dashboard or revoke access in your Google account settings. Tokens are immediately invalidated.
How It Works
- Start the connection. From the ClawStaff dashboard, click “Add Google Workspace” to begin setup. Select which Google services to enable and choose read-only or full access for each.
- Authorize with Google. You are redirected to Google’s OAuth consent screen. Review the requested scopes (they match exactly what you selected) and click Allow.
- Assign to a Claw. Connect the Google Workspace credential to one or more Claws. Each Claw receives the scoped tokens at runtime inside its ClawCage.
- Claw works across Google. Your Claw uses the OAuth tokens to call Google APIs from within its isolated container. Token refresh is handled automatically. All actions are logged.
Cross-Integration Workflows
Google Workspace combined with your other tools enables powerful automation:
- Gmail to Slack to Jira. A support email arrives in a shared Gmail inbox. Your Claw reads the email, posts a summary to the #support Slack channel, and creates a Jira ticket with the customer’s details and issue description. The Claw replies to the customer acknowledging the ticket.
- Slack discussion to Google Docs. After a long Slack thread, your Claw summarizes the conversation and creates a Google Doc in the team’s shared Drive folder with decisions, action items, and owners.
- GitHub PR merged to Google Sheets changelog. When a pull request is merged, your Claw appends a row to a Google Sheets changelog with the PR title, author, merge date, and linked issues. A weekly Slides deck is auto-generated from the sheet.
- Google Forms to Notion database. New form responses trigger your Claw to parse the data and create corresponding entries in a Notion database, bridging Google Forms with your team’s Notion-based workflows.