Guide · Agent skill
How to use the Install Google Workspace and GCP CLIs agent skill
Updated · written with AI from the project's own documentation and checked against our catalogue data
The bootstrap-google-tools skill is an agent skill that installs and authenticates the command-line tools an agent needs for Google Workspace, Google Cloud and MCP work when those tools are missing from its sandbox. It is aimed at developers running agents in a sandboxed Debian environment. After this guide you will know how to add the skill to Claude, how to ask for it in plain language, and what it will and will not do on your behalf.
Quick start
- 1Download and unzip the skill. Download the ZIP from this page and unzip it so the bootstrap-google-tools folder contains SKILL.md.
- 2Place it in the skills folder. Move the folder into ~/.claude/skills/ for personal use or into a project's .claude/skills/ folder, or upload the ZIP under Settings → Capabilities → Skills.
- 3Ask for the tool you need. Describe the task in plain language, such as listing Drive files or installing gcloud, so the agent loads the skill.
- 4Provide a credential source. Use a Connect Workspace token, a Desktop-app OAuth client, or a service account key for Google Workspace access.
- 5Complete the login. If the agent starts an interactive login, open the auth link it provides and paste the redirect URL back when asked.
- 6Verify with a real read. Run a simple read such as a Gmail message list to confirm the tool works before starting the main task.
What is an agent skill, and what does this one do?
An agent skill is a folder containing a SKILL.md file that gives an AI agent instructions for one kind of task. The agent loads the instructions when a request matches them.
This skill covers four tools: gws for Google Workspace (Drive, Gmail, Sheets, Calendar, Chat), gcloud for Google Cloud, agents-cli for calling remotely deployed agents, and mcp-cli for using tools exposed by MCP servers. The tools are independent, so the skill installs only the one the task needs. It is a menu, not a fixed sequence.
- Checks whether a tool is already present with command -v before installing anything.
- Installs Node and npm under ~/.local when gws needs them.
- Stores OAuth clients, tokens and config in /workspace/lha/config so logins can survive a runtime-image upgrade.
- Probes for an existing Connect Workspace token before asking you to set up new credentials.
- Hands off to other skills (such as google-workspace) for actual usage.
Install the skill in Claude
Download the ZIP from this page and unzip it. For a personal setup, place the bootstrap-google-tools folder inside ~/.claude/skills/. For a single project, place it inside that project's .claude/skills/ folder.
Alternatively, upload the ZIP in the Claude apps under Settings → Capabilities → Skills.
- Personal: ~/.claude/skills/bootstrap-google-tools/
- Project: .claude/skills/bootstrap-google-tools/ inside your project
Trigger the skill with natural requests
The skill loads when a request involves Google Workspace, Google Cloud or MCP tools and the command is missing, or when you ask the agent to prepare for that work. The source names the trigger phrase "command not found" and the situation of preparing before GCP, Workspace or MCP work.
Plain requests that fit the description include asking the agent to set up gws so it can read a Drive folder, or asking it to install gcloud before a Cloud task.
- "gws: command not found. Set up the Google Workspace CLI so you can list my Drive files."
- "Install gcloud and log me in before we start the Cloud Run work."
- "Get mcp-cli installed so you can call the tools on this MCP server."
What the skill needs before it runs
The skill is written for a Debian x86_64 sandbox that has curl and tar but no xz. It downloads Node.js LTS from nodejs.org and packages from the npm registry, so network access to those hosts is required.
For Google Workspace you need one of three credential sources: a Google OAuth Desktop-app client, a service account key, or a Connect Workspace token from the web UI. Interactive OAuth login needs a person to paste a redirect URL back to the agent.
- Debian x86_64 sandbox with curl and tar (no xz)
- Node.js LTS, installed by the skill
- npm registry and nodejs.org access
- One Google credential source: Desktop-app OAuth client, service account key, or Connect Workspace token
Safety notes: scripts and network access
This skill runs scripts and uses the network. It downloads software, runs npm install -g, and can create OAuth clients or handle tokens. Review the SKILL.md before you install it if your environment is sensitive.
Credentials are stored in a folder under /workspace. Anyone with access to that folder can use the saved logins, so do not use this skill where a shared folder would expose them.
- Do not use it on a local machine where these tools already work. It assumes the /workspace and ~/.local layout.
- Do not use it for unattended jobs unless you have a service account, because interactive login requires a person.
- A Connect Workspace token only carries the surfaces and access level you chose and lasts about an hour without refresh.
Tips for smoother results
Ask for one tool at a time. The skill is designed to install only what the task needs, and a smaller request is easier to verify.
If a Google call returns a 403 or scope error, the token probably lacks the surface or read-write access you need. Reconnect with more surfaces rather than treating it as a missing token. Use a real read such as a Gmail list call to check, because gws auth status can report none even when reads succeed.
After gws is working, the source suggests installing Google's official gws skills from the googleworkspace/cli repository, such as gws-gmail or gws-drive.
- Use the google-workspace skill for auth details and command shapes.
- Run command -v gws first if you are unsure what is already installed.
bash(command="command -v gws")What people use it for
- Listing and reading files in Google Drive from an agent running in a sandbox.
- Exporting or updating Google Sheets data through the gws CLI.
- Searching or sending Gmail messages from an automated workflow with proper credentials.
- Preparing gcloud so an agent can run Google Cloud commands in a project.
- Installing mcp-cli so an agent can call tools exposed by an MCP server.
Frequently asked questions
Is the bootstrap-google-tools skill free?
The skill is published under the Apache-2.0 licence, as stated on this page. The tools it installs, such as gws and gcloud, are separate projects with their own terms, and this guide does not state their pricing.
What do I need to use bootstrap-google-tools?
You need a Debian x86_64 sandbox with curl and tar, network access to nodejs.org and the npm registry, and one Google credential source. That source can be a Desktop-app OAuth client, a service account key, or a Connect Workspace token.
Why does the skill store credentials in /workspace?
Binaries in ~/.local are reinstalled after a runtime-image upgrade, but /workspace is migrated, so pointing tool config directories there keeps logins. The source notes that this migration drops symlinks and strips executable bits, so binaries are not stored there.
Why does gws say command not found?
The sandbox does not ship gws, gcloud, agents-cli or mcp-cli preinstalled. Ask the agent to run the skill, which checks with command -v and installs only the missing tool.
Can I use this skill for unattended jobs?
Only with a service account key, because interactive OAuth login requires a person to paste a redirect URL. The source recommends the service-account option for fully unattended automation.
How does this compare with installing the tools myself?
On a local machine where the tools already work, the skill is unnecessary and assumes a different layout. It is useful in the specific sandbox described, where the skill's verified recipe handles Node, PATH and credential storage for you.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
This skill suits developers whose sandboxed agent needs Google Workspace, Google Cloud or MCP tools and hits a missing-command error. It is a poor fit for local machines where these tools are already set up, for unattended jobs without a service account, or for anyone who does not want Google credentials stored in a shared folder.
Download the skill