Toolcape · Workspace Admin

Toolcape + Workspace Admin

Toolcape connects a company’s existing AI to its systems through one MCP entry point, with account connections, group and individual permissions, and audit logs. This documentation describes a product prototype; it is not evidence that a live server or account is connected.

The connection

Workspace Admin: Administration of company Google Workspace users, groups and devices.
API connection · AI uses Toolcape through MCP
Provider sign-in (OAuth). Confirm whether the configured connection acts as the user or uses application permissions.

Typical actions

- Read: Read users and groups
- Create: Create supported users or groups
- Change: Change membership and admin settings
The connecting account must have the required Workspace administrator rights. This belongs with IT, not ordinary document access.

Setup

1. IT configures the provider app, API and requested scopes.
2. Provider sign-in (OAuth). Confirm whether the configured connection acts as the user or uses application permissions.
3. Make the service available in Toolcape. Set Everyone, group and individual rules for the actions actually needed. Adding a service does not grant access.
4. Connect the approved AI client to the actual Toolcape MCP address and sign in. Start with a harmless read-only task and check the audit log.

Permissions

For personal delegated access, the provider account, approved app scopes and Toolcape rules must all permit the action. Shared accounts and application permissions may have other limits. Toolcape combines Everyone and group grants; a personal exception replaces inherited access for that service. Reading can disclose confidential information. Sharing, sending and deletion need separate consideration.

Calling an operation

First discover which tools the connected Toolcape server actually exposes. If it offers search → describe → execute, find the relevant operation, inspect its input schema and permissions, then call it with validated inputs. Tool names vary by server; do not invent names, arguments, URLs or successful outcomes. Without connected tools, give setup guidance instead of claiming to perform actions.

Operation reference

Catalog snapshot: 16 September 2026. Verify the current schema before calling.
- directoryMembersGet — Get Members
GET https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/members/{memberKey}
https://developers.google.com/workspace/admin/
- directoryMembersUpdate — Update Members
PUT https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/members/{memberKey}
https://developers.google.com/workspace/admin/
- directoryMembersDelete — Delete Members
DELETE https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/members/{memberKey}
https://developers.google.com/workspace/admin/
- directoryMembersPatch — Patch Members
PATCH https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/members/{memberKey}
https://developers.google.com/workspace/admin/
- directoryMembersList — List Members
GET https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/members
https://developers.google.com/workspace/admin/
- directoryMembersInsert — Insert Members
POST https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/members
https://developers.google.com/workspace/admin/
- directoryMembersHasMember — Members Has Member
GET https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/hasMember/{memberKey}
https://developers.google.com/workspace/admin/
- directorySchemasGet — Get Schemas
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/schemas/{schemaKey}
https://developers.google.com/workspace/admin/
- directorySchemasUpdate — Update Schemas
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/schemas/{schemaKey}
https://developers.google.com/workspace/admin/
- directorySchemasDelete — Delete Schemas
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/schemas/{schemaKey}
https://developers.google.com/workspace/admin/
- directorySchemasPatch — Patch Schemas
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/schemas/{schemaKey}
https://developers.google.com/workspace/admin/
- directorySchemasList — List Schemas
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/schemas
https://developers.google.com/workspace/admin/
- directorySchemasInsert — Insert Schemas
POST https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/schemas
https://developers.google.com/workspace/admin/
- directoryResourcesBuildingsList — List Resources Buildings
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/buildings
https://developers.google.com/workspace/admin/
- directoryResourcesBuildingsInsert — Insert Resources Buildings
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/buildings
https://developers.google.com/workspace/admin/
- directoryResourcesBuildingsGet — Get Resources Buildings
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/buildings/{buildingId}
https://developers.google.com/workspace/admin/
- directoryResourcesBuildingsUpdate — Update Resources Buildings
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/buildings/{buildingId}
https://developers.google.com/workspace/admin/
- directoryResourcesBuildingsDelete — Delete Resources Buildings
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/buildings/{buildingId}
https://developers.google.com/workspace/admin/
- directoryResourcesBuildingsPatch — Patch Resources Buildings
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/buildings/{buildingId}
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesGet — Get Resources Features
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features/{featureKey}
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesUpdate — Update Resources Features
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features/{featureKey}
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesDelete — Delete Resources Features
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features/{featureKey}
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesPatch — Patch Resources Features
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features/{featureKey}
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesList — List Resources Features
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesInsert — Insert Resources Features
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features
https://developers.google.com/workspace/admin/
- directoryResourcesFeaturesRename — Resources Features Rename
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/features/{oldName}/rename
https://developers.google.com/workspace/admin/
- directoryResourcesCalendarsGet — Get Resources Calendars
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/calendars/{calendarResourceId}
https://developers.google.com/workspace/admin/
- directoryResourcesCalendarsUpdate — Update Resources Calendars
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/calendars/{calendarResourceId}
https://developers.google.com/workspace/admin/
- directoryResourcesCalendarsDelete — Delete Resources Calendars
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/calendars/{calendarResourceId}
https://developers.google.com/workspace/admin/
- directoryResourcesCalendarsPatch — Patch Resources Calendars
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/calendars/{calendarResourceId}
https://developers.google.com/workspace/admin/
- directoryResourcesCalendarsList — List Resources Calendars
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/calendars
https://developers.google.com/workspace/admin/
- directoryResourcesCalendarsInsert — Insert Resources Calendars
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/resources/calendars
https://developers.google.com/workspace/admin/
- directoryTokensGet — Get Tokens
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/tokens/{clientId}
https://developers.google.com/workspace/admin/
- directoryTokensDelete — Delete Tokens
DELETE https://admin.googleapis.com/admin/directory/v1/users/{userKey}/tokens/{clientId}
https://developers.google.com/workspace/admin/
- directoryTokensList — List Tokens
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/tokens
https://developers.google.com/workspace/admin/
- directoryPrivilegesList — List Privileges
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/ALL/privileges
https://developers.google.com/workspace/admin/
- directoryRolesGet — Get Roles
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/{roleId}
https://developers.google.com/workspace/admin/
- directoryRolesUpdate — Update Roles
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/{roleId}
https://developers.google.com/workspace/admin/
- directoryRolesDelete — Delete Roles
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/{roleId}
https://developers.google.com/workspace/admin/
- directoryRolesPatch — Patch Roles
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/{roleId}
https://developers.google.com/workspace/admin/
- directoryRolesList — List Roles
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles
https://developers.google.com/workspace/admin/
- directoryRolesInsert — Insert Roles
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles
https://developers.google.com/workspace/admin/
- directoryRoleAssignmentsGet — Get Role Assignments
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roleassignments/{roleAssignmentId}
https://developers.google.com/workspace/admin/
- directoryRoleAssignmentsDelete — Delete Role Assignments
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roleassignments/{roleAssignmentId}
https://developers.google.com/workspace/admin/
- directoryRoleAssignmentsList — List Role Assignments
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roleassignments
https://developers.google.com/workspace/admin/
- directoryRoleAssignmentsInsert — Insert Role Assignments
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roleassignments
https://developers.google.com/workspace/admin/
- directoryDomainsGet — Get Domains
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domains/{domainName}
https://developers.google.com/workspace/admin/
- directoryDomainsDelete — Delete Domains
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domains/{domainName}
https://developers.google.com/workspace/admin/
- directoryDomainsList — List Domains
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domains
https://developers.google.com/workspace/admin/
- directoryDomainsInsert — Insert Domains
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domains
https://developers.google.com/workspace/admin/
- directoryTwoStepVerificationTurnOff — Two Step Verification Turn Off
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/twoStepVerification/turnOff
https://developers.google.com/workspace/admin/
- directoryMobiledevicesGet — Get Mobiledevices
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/mobile/{resourceId}
https://developers.google.com/workspace/admin/
- directoryMobiledevicesDelete — Delete Mobiledevices
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/mobile/{resourceId}
https://developers.google.com/workspace/admin/
- directoryMobiledevicesList — List Mobiledevices
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/mobile
https://developers.google.com/workspace/admin/
- directoryMobiledevicesAction — Mobiledevices Action
POST https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/mobile/{resourceId}/action
https://developers.google.com/workspace/admin/
- directoryOrgunitsGet — Get Orgunits
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/orgunits/{+orgUnitPath}
https://developers.google.com/workspace/admin/
- directoryOrgunitsUpdate — Update Orgunits
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/orgunits/{+orgUnitPath}
https://developers.google.com/workspace/admin/
- directoryOrgunitsDelete — Delete Orgunits
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/orgunits/{+orgUnitPath}
https://developers.google.com/workspace/admin/
- directoryOrgunitsPatch — Patch Orgunits
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/orgunits/{+orgUnitPath}
https://developers.google.com/workspace/admin/
- directoryOrgunitsList — List Orgunits
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/orgunits
https://developers.google.com/workspace/admin/
- directoryOrgunitsInsert — Insert Orgunits
POST https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/orgunits
https://developers.google.com/workspace/admin/
- directoryDomainAliasesList — List Domain Aliases
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domainaliases
https://developers.google.com/workspace/admin/
- directoryDomainAliasesInsert — Insert Domain Aliases
POST https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domainaliases
https://developers.google.com/workspace/admin/
- directoryDomainAliasesGet — Get Domain Aliases
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domainaliases/{domainAliasName}
https://developers.google.com/workspace/admin/
- directoryDomainAliasesDelete — Delete Domain Aliases
DELETE https://admin.googleapis.com/admin/directory/v1/customer/{customer}/domainaliases/{domainAliasName}
https://developers.google.com/workspace/admin/
- directoryCustomersGet — Get Customers
GET https://admin.googleapis.com/admin/directory/v1/customers/{customerKey}
https://developers.google.com/workspace/admin/
- directoryCustomersUpdate — Update Customers
PUT https://admin.googleapis.com/admin/directory/v1/customers/{customerKey}
https://developers.google.com/workspace/admin/
- directoryCustomersPatch — Patch Customers
PATCH https://admin.googleapis.com/admin/directory/v1/customers/{customerKey}
https://developers.google.com/workspace/admin/
- adminCustomersChromePrintServersBatchCreatePrintServers — Batch admin Customers Chrome Print Servers Create Print Servers
POST

- adminCustomersChromePrintServersBatchDeletePrintServers — Batch admin Customers Chrome Print Servers Delete Print Servers
POST

- adminCustomersChromePrintServersGet — Get admin Customers Chrome Print Servers
GET

- adminCustomersChromePrintServersDelete — Delete admin Customers Chrome Print Servers
DELETE

- adminCustomersChromePrintServersPatch — Patch admin Customers Chrome Print Servers
PATCH

- adminCustomersChromePrintServersList — List admin Customers Chrome Print Servers
GET

- adminCustomersChromePrintServersCreate — Create admin Customers Chrome Print Servers
POST

- adminCustomersChromePrintersList — List admin Customers Chrome Printers
GET

- adminCustomersChromePrintersCreate — Create admin Customers Chrome Printers
POST

- adminCustomersChromePrintersGet — Get admin Customers Chrome Printers
GET

- adminCustomersChromePrintersDelete — Delete admin Customers Chrome Printers
DELETE

- adminCustomersChromePrintersPatch — Patch admin Customers Chrome Printers
PATCH

- adminCustomersChromePrintersBatchCreatePrinters — Batch admin Customers Chrome Printers Create Printers
POST

- adminCustomersChromePrintersBatchDeletePrinters — Batch admin Customers Chrome Printers Delete Printers
POST

- adminCustomersChromePrintersListPrinterModels — List admin Customers Chrome Printers Printer Models
GET

- directoryChromeosdevicesAction — Chromeosdevices Action
POST https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/chromeos/{resourceId}/action
https://developers.google.com/workspace/admin/
- directoryChromeosdevicesGet — Get Chromeosdevices
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/chromeos/{deviceId}
https://developers.google.com/workspace/admin/
- directoryChromeosdevicesUpdate — Update Chromeosdevices
PUT https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/chromeos/{deviceId}
https://developers.google.com/workspace/admin/
- directoryChromeosdevicesPatch — Patch Chromeosdevices
PATCH https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/chromeos/{deviceId}
https://developers.google.com/workspace/admin/
- directoryChromeosdevicesList — List Chromeosdevices
GET https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/chromeos
https://developers.google.com/workspace/admin/
- directoryChromeosdevicesMoveDevicesToOu — Move Chromeosdevices Devices To Ou
POST https://admin.googleapis.com/admin/directory/v1/customer/{customerId}/devices/chromeos/moveDevicesToOu
https://developers.google.com/workspace/admin/
- adminChannelsStop — Admin Channels Stop
POST

- directoryVerificationCodesInvalidate — Verification Codes Invalidate
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/verificationCodes/invalidate
https://developers.google.com/workspace/admin/
- directoryVerificationCodesList — List Verification Codes
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/verificationCodes
https://developers.google.com/workspace/admin/
- directoryVerificationCodesGenerate — Verification Codes Generate
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/verificationCodes/generate
https://developers.google.com/workspace/admin/
- directoryUsersList — List Users
GET https://admin.googleapis.com/admin/directory/v1/users
https://developers.google.com/workspace/admin/
- directoryUsersInsert — Insert Users
POST https://admin.googleapis.com/admin/directory/v1/users
https://developers.google.com/workspace/admin/
- directoryUsersCreateGuest — Create Users Guest
POST https://admin.googleapis.com/admin/directory/v1/users:createGuest
https://developers.google.com/workspace/admin/
- directoryUsersGet — Get Users
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}
https://developers.google.com/workspace/admin/
- directoryUsersUpdate — Update Users
PUT https://admin.googleapis.com/admin/directory/v1/users/{userKey}
https://developers.google.com/workspace/admin/
- directoryUsersDelete — Delete Users
DELETE https://admin.googleapis.com/admin/directory/v1/users/{userKey}
https://developers.google.com/workspace/admin/
- directoryUsersPatch — Patch Users
PATCH https://admin.googleapis.com/admin/directory/v1/users/{userKey}
https://developers.google.com/workspace/admin/
- directoryUsersSignOut — Users Sign Out
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/signOut
https://developers.google.com/workspace/admin/
- directoryUsersUndelete — Users Undelete
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/undelete
https://developers.google.com/workspace/admin/
- directoryUsersMakeAdmin — Users Make Admin
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/makeAdmin
https://developers.google.com/workspace/admin/
- directoryUsersWatch — Users Watch
POST https://admin.googleapis.com/admin/directory/v1/users/watch
https://developers.google.com/workspace/admin/
- directoryUsersPhotosGet — Get Users Photos
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/photos/thumbnail
https://developers.google.com/workspace/admin/
- directoryUsersPhotosUpdate — Update Users Photos
PUT https://admin.googleapis.com/admin/directory/v1/users/{userKey}/photos/thumbnail
https://developers.google.com/workspace/admin/
- directoryUsersPhotosDelete — Delete Users Photos
DELETE https://admin.googleapis.com/admin/directory/v1/users/{userKey}/photos/thumbnail
https://developers.google.com/workspace/admin/
- directoryUsersPhotosPatch — Patch Users Photos
PATCH https://admin.googleapis.com/admin/directory/v1/users/{userKey}/photos/thumbnail
https://developers.google.com/workspace/admin/
- directoryUsersAliasesList — List Users Aliases
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/aliases
https://developers.google.com/workspace/admin/
- directoryUsersAliasesInsert — Insert Users Aliases
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/aliases
https://developers.google.com/workspace/admin/
- directoryUsersAliasesDelete — Delete Users Aliases
DELETE https://admin.googleapis.com/admin/directory/v1/users/{userKey}/aliases/{alias}
https://developers.google.com/workspace/admin/
- directoryUsersAliasesWatch — Users Aliases Watch
POST https://admin.googleapis.com/admin/directory/v1/users/{userKey}/aliases/watch
https://developers.google.com/workspace/admin/
- directoryAspsGet — Get Asps
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/asps/{codeId}
https://developers.google.com/workspace/admin/
- directoryAspsDelete — Delete Asps
DELETE https://admin.googleapis.com/admin/directory/v1/users/{userKey}/asps/{codeId}
https://developers.google.com/workspace/admin/
- directoryAspsList — List Asps
GET https://admin.googleapis.com/admin/directory/v1/users/{userKey}/asps
https://developers.google.com/workspace/admin/
- directoryGroupsGet — Get Groups
GET https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}
https://developers.google.com/workspace/admin/
- directoryGroupsUpdate — Update Groups
PUT https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}
https://developers.google.com/workspace/admin/
- directoryGroupsDelete — Delete Groups
DELETE https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}
https://developers.google.com/workspace/admin/
- directoryGroupsPatch — Patch Groups
PATCH https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}
https://developers.google.com/workspace/admin/
- directoryGroupsList — List Groups
GET https://admin.googleapis.com/admin/directory/v1/groups
https://developers.google.com/workspace/admin/
- directoryGroupsInsert — Insert Groups
POST https://admin.googleapis.com/admin/directory/v1/groups
https://developers.google.com/workspace/admin/
- directoryGroupsAliasesDelete — Delete Groups Aliases
DELETE https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/aliases/{alias}
https://developers.google.com/workspace/admin/
- directoryGroupsAliasesList — List Groups Aliases
GET https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/aliases
https://developers.google.com/workspace/admin/
- directoryGroupsAliasesInsert — Insert Groups Aliases
POST https://admin.googleapis.com/admin/directory/v1/groups/{groupKey}/aliases
https://developers.google.com/workspace/admin/
- adminCustomerDevicesChromeosCountChromeOsDevices — Admin Customer Devices Chromeos Count Chrome Os Devices
GET

- adminCustomerDevicesChromeosBatchChangeStatus — Batch admin Customer Devices Chromeos Change Status
POST

- adminCustomerDevicesChromeosIssueCommand — Admin Customer Devices Chromeos Issue Command
POST

- adminCustomerDevicesChromeosCommandsGet — Get admin Customer Devices Chromeos Commands
GET

A useful first question

Which users belong to the sales group?

If it fails

Check the account, expired authorization, app approval, provider scopes and Toolcape permissions. Share only redacted errors with support. Never paste passwords, tokens or client secrets into an AI conversation.

Markdown