Google Drive connector
Index Google Docs, Sheets, and PDFs from company Shared Drives or selected My Drive folders. Prefer the invite-email company Drive flow for teams; use personal connectorsonly for each user's own files (live tools — not recursive knowledge ingest).
Modes at a glance
| Mode | Best for | What you do |
|---|---|---|
| Company Drive (invite email) — recommended | Shared Drives, handbooks, recursive folder trees | Click Create Drive reader, copy the email OrgMCP shows, add it as a Shared Drive Viewer, test access, pick folders |
| Personal My Drive → share to SA | Personal folders that should enter the company knowledge base | Share the folder with the company Drive reader email as Viewer, then refresh the Sources tree or paste the folder URL |
| Personal OAuth | Individual notes under your Google account (live tools) | Connect on My connectors via Google Picker (drive.file — folder pick does not grant children for RAG) |
| Advanced — your own service account JSON | Enterprises that must own the GCP project / key | Paste SA JSON under Advanced on Connectors → Google Drive |
Company Drive — invite this email
- Admin console → Connectors → Set up company Drive (Connect integrations). A second Drive uses Connect another → guided form Advanced BYO JSON.
- Click Create Drive reader. OrgMCP provisions a per-tenant Google identity (you never open Google Cloud Console).
- Copy the email shown (ends with
.iam.gserviceaccount.com). - In Google Drive, open your Shared Drive → Manage members, add that email as Viewer. If your Workspace blocks outside accounts, allow external sharing on that Shared Drive (or ask IT). For a personal My Drive folder, use Share → Viewer with the same email (one share is recursive).
- Back in OrgMCP, click Test access, then open Sources: browse Shared Drives / shared with me, click Refresh folder list, or paste a folder URL (
https://drive.google.com/drive/folders/…).
Operator notes (GCP project, quotas, revoke): see docs/RUN-platform-drive-sa.md in the repository.
What gets indexed
- Google Docs (exported as Markdown).
- PDFs (text extracted via Apache Tika; OCR for scanned PDFs is off by default — turn on per-source if you need it).
- Plain text and CSV files.
- Google Sheets (each sheet → one chunk; off by default).
What does not get indexed
- Files the company Drive reader cannot see (not a Shared Drive member / folder not shared).
- Personal OAuth under
drive.file— only Picker-granted items; picking a folder does not grant its children. Use company Drive invite-email (or share the folder to the SA email) for recursive trees. - Binary files larger than 50 MB.
Shared Drives and shared-with-me
Supported via the company Drive reader (or Advanced BYO service account). The reader email must be a member of the Shared Drive, or the folder must be shared to that email. The folder tree on /app/connectors/[id]/sources lists Shared Drives, folders shared with the SA (shared with me), and the SA root; ingest recurses into sub-folders you select.
Advanced — your own service-account JSON
Enterprises that require keys in their own GCP project can still paste JSON under Advanced on the Google Drive connector form. Add that SA as a Shared Drive member (or share a personal folder to its client_email), then pick folders on Sources.
Domain-Wide Delegation (DWD)
Not required for the invite-email flow. DWD remains an advanced enterprise option for impersonating domain users and is not part of the default setup.