Gmail, Calendar, and Drive permissions
OAuth scopes define what an app can read or change in a Google account. This reference lists every scope currently documented for Gmail, Google Calendar, and Google Drive.
Request the narrowest scopes your app needs. Public apps using sensitive or restricted scopes may need Google verification; restricted data stored or transmitted by a server can also require a security assessment.
Selected scopes 0
14 scopes
Gmail has no draft-only OAuth scope. gmail.compose also permits sending, even without gmail.send. Every scope accepted by drafts.create is also accepted by drafts.send. To enforce “draft emails, never send,” keep the OAuth token outside the agent and use a trusted service that allows only the required draft operations and blocks sending. An instruction to the agent alone does not enforce this restriction.
| Scope | Access | What it allows |
|---|---|---|
https://www.googleapis.com/auth/gmail.addons.current.action.compose | Drafts + send | Manage drafts and send email while the user interacts with a Gmail add-on. |
https://www.googleapis.com/auth/gmail.addons.current.message.action | Read only | View messages while the user interacts with a Gmail add-on. |
https://www.googleapis.com/auth/gmail.labels | Read, write | View and edit Gmail labels. |
https://www.googleapis.com/auth/gmail.addons.current.message.metadata | Read only | View message metadata while a Gmail add-on is running. |
https://www.googleapis.com/auth/gmail.addons.current.message.readonly | Read only | View messages while a Gmail add-on is running. |
https://www.googleapis.com/auth/gmail.send | Send only | Send email on the user's behalf. |
https://mail.google.com/ | Read, write | Read, compose, send, and permanently delete all Gmail data. |
https://www.googleapis.com/auth/gmail.readonly | Read only | View email messages and Gmail settings. |
https://www.googleapis.com/auth/gmail.compose | Drafts + send | Create and manage drafts, and send email. Sending cannot be disabled within this scope. |
https://www.googleapis.com/auth/gmail.insert | Insert only | Insert email directly into the mailbox. |
https://www.googleapis.com/auth/gmail.modify | Read, write | Read, compose, send, and modify email without bypassing Trash for permanent deletion. |
https://www.googleapis.com/auth/gmail.metadata | Read only | View message metadata such as labels and headers, but not message bodies. |
https://www.googleapis.com/auth/gmail.settings.basic | Read, write | View and change basic Gmail settings and filters. |
https://www.googleapis.com/auth/gmail.settings.sharing | Read, write | Manage sensitive sharing settings. Available only to Workspace administrators using domain-wide delegation. |
Google Calendar
Official Calendar scope reference| Scope | Access | What it allows |
|---|---|---|
https://www.googleapis.com/auth/calendar | Read, write | See, edit, share, and permanently delete every accessible calendar. |
https://www.googleapis.com/auth/calendar.readonly | Read only | View and download accessible calendars. |
https://www.googleapis.com/auth/calendar.freebusy | Read only | View the user's availability. |
https://www.googleapis.com/auth/calendar.events | Read, write | View and edit events on all accessible calendars. |
https://www.googleapis.com/auth/calendar.events.readonly | Read only | View events on all accessible calendars. |
https://www.googleapis.com/auth/calendar.settings.readonly | Read only | View Calendar settings. |
https://www.googleapis.com/auth/calendar.addons.execute | Execute only | Run as a Calendar add-on. |
https://www.googleapis.com/auth/calendar.addons.current.event.read | Read only | View the event currently open in a Calendar add-on. |
https://www.googleapis.com/auth/calendar.addons.current.event.write | Write only | Edit the event currently open in a Calendar add-on. |
https://www.googleapis.com/auth/calendar.events.owned | Read, write | View, create, change, and delete events on calendars the user owns. |
https://www.googleapis.com/auth/calendar.events.owned.readonly | Read only | View events on calendars the user owns. |
https://www.googleapis.com/auth/calendar.events.freebusy | Read only | View availability on accessible calendars. |
https://www.googleapis.com/auth/calendar.app.created | Read, write | Create secondary calendars and manage events on calendars created by the app. |
https://www.googleapis.com/auth/calendar.calendarlist | Read, write | View, add, and remove calendars in the user's calendar list. |
https://www.googleapis.com/auth/calendar.calendarlist.readonly | Read only | View the user's calendar list. |
https://www.googleapis.com/auth/calendar.calendars | Read, write | View and change calendar properties, and create secondary calendars. |
https://www.googleapis.com/auth/calendar.calendars.readonly | Read only | View properties of accessible calendars. |
https://www.googleapis.com/auth/calendar.acls | Read, write | View and change sharing permissions for calendars the user owns. |
https://www.googleapis.com/auth/calendar.acls.readonly | Read only | View sharing permissions for calendars the user owns. |
https://www.googleapis.com/auth/calendar.events.public.readonly | Read only | View events on public calendars. |
Google Drive
Official Drive scope reference| Scope | Access | What it allows |
|---|---|---|
https://www.googleapis.com/auth/drive.appdata | Read, write | View and manage the app's own configuration data in Drive. |
https://www.googleapis.com/auth/drive.appfolder | Read, write | Alias of drive.appdata; view and manage the app's configuration data. |
https://www.googleapis.com/auth/drive.install | Menu integration | Allow the app to appear in Drive's Open with and New menus. |
https://www.googleapis.com/auth/drive.file | Read, write | Create files and access only files the user opens with or shares with the app. |
https://www.googleapis.com/auth/drive.apps.readonly | Read only | View apps authorized to access the user's Drive. |
https://www.googleapis.com/auth/drive | Read, write | View and manage all the user's Drive files. |
https://www.googleapis.com/auth/drive.readonly | Read only | View and download all the user's Drive files. |
https://www.googleapis.com/auth/drive.activity | Read, write | View and add to the activity record of Drive files. |
https://www.googleapis.com/auth/drive.activity.readonly | Read only | View the activity record of Drive files. |
https://www.googleapis.com/auth/drive.meet.readonly | Read only | View Drive files created or edited by Google Meet. |
https://www.googleapis.com/auth/drive.metadata | Read, write | View and manage metadata for Drive files. |
https://www.googleapis.com/auth/drive.metadata.readonly | Read only | View metadata for Drive files. |
https://www.googleapis.com/auth/drive.scripts | Write only | Modify how Google Apps Script projects behave. |
