Automation · agent infrastructure component
Google Workspace CLI: review, pricing, security and alternatives
Google Workspace CLI is an open-source agent infrastructure component published by Google, in the automation family. Google Workspace CLI exposes Workspace services through command-line operations and includes skills for AI agents. Its repository has 31,847 stars and its last commit is from March 31, 2026.
What Google Workspace CLI does
Google Workspace CLI belongs to the automation family: platforms, often visual, that chain steps, apps and models into workflows with or without an agent. On our grid it ranks #18 of the 26 projects of this family listed in the directory.
It is not an agent in itself: it is a component other agents use (memory, isolated execution, web access, model gateway or monitoring). You pick it based on the agent or framework it has to equip.
You use it from: terminal (CLI). It can run on your own machine or server.
Who is Google Workspace CLI for?
It is for teams that want to connect their tools (CRM, e-mail, spreadsheets) and hand the AI the steps that require reading or deciding. Typical tasks people give it:
- qualify incoming requests and route them
- extract data from documents into a spreadsheet
- generate periodic reports
It is a good candidate if you are comfortable in a terminal and your data must stay on your machines.
Access and human control
According to its documentation, Google Workspace CLI can:
- call online services and APIs
- read and send messages
- read and edit files
We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.
Google Workspace CLI pricing
The code is free, under the Apache-2.0 licence.
Getting started with Google Workspace CLI
- Install it: the project ships as a compiled Rust binary (direct download or
cargo install). The exact command is in the repository README. - Start with the minimal example from the docs, then add one tool at a time and check what the agent does with it.
- Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.
Security: risk level
A workflow runs unattended: limit the credentials it holds and log what it sends.
Points found for Google Workspace CLI:
- Trifecta: access to private data, reading outside content and sending messages. That combination makes data leaks through prompt injection possible.
Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.
Project activity and releases
Created on March 2, 2026, the googleworkspace/cli repository has 31,847 stars, 1,951 forks and 134 open issues, with 283 commits in total. Last change 7 months ago.
Over the last 52 weeks: 276 commits, an average of 5.3 per week.
44 releases in total; 30 in the last twelve months. Latest release: v0.22.5, on March 31, 2026.
Google Workspace CLI vs other automation
GitHub stars of the best-rated open-source projects in the automation family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.
Google Workspace CLI and other automation at a glance
The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.
| Agent | Model | Score | Stars or entry price | Self-hostable | Human approval |
|---|---|---|---|---|---|
| Google Workspace CLI | open source | 57 | 31.8K ★ | yes | – |
| Langflow | open source | 93 | 156K ★ | yes | – |
| n8n | open source | 85 | 208.5K ★ | yes | – |
| Sim | open source | 85 | 29.9K ★ | yes | – |
| AutoGPT | open source | 84 | 187.7K ★ | yes | – |
| Dify | open source | 83 | 159.4K ★ | yes | – |
| Kestra | open source | 80 | 30K ★ | yes | – |
| Trigger.dev | open source | 77 | 16.6K ★ | yes | – |
How we rated it
Score: 57/100, computed only from public, verifiable data, with no subjective testing or partnership:
- Adoption 30/40: 31,847 stars on a log scale (40 points from about 200,000).
- Activity 7/30: last commit 7 months ago, 0 releases in six months, 276 commits in a year.
- Framework 20/30: licence, default human approval, self-hosting, model choice and documentation site.
The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.
Verdict
Google Workspace CLI is a project to watch: compare it with the alternatives before adopting it.
Strengths
- Widely followed: 31.8K stars
- Frequent releases (30 in a year)
- Can run on your side: data under control
- Permissive licence (Apache-2.0)
Limitations
- Broad access without default approval
- No commit for 7 months
Avoid if…
- It would access personal or bank accounts unattended
Alternatives
Learn more
Frequently asked questions
Is Google Workspace CLI free?
The software is free (Apache-2.0 licence). You still pay for the model calls, unless you use a local model.
Is Google Workspace CLI safe?
Our risk level: high. Points found: trifecta. Give it minimum rights and approve irreversible actions.
Which models does Google Workspace CLI use?
Its documentation does not specify the supported models.
Can Google Workspace CLI be installed on your own server?
Yes, from the googleworkspace/cli repository. Data then stays with you, but security and updates are your job.
What are the alternatives to Google Workspace CLI?
In the same family: Langflow, n8n, Sim, and AutoGPT.
Google Workspace CLI or Langflow: what is the difference?
Both belong to the automation family. Google Workspace CLI has 31.8K stars against 156K for Langflow. The right choice mostly depends on the access you are willing to give it.
Related articles
- Open source or proprietary AI agent: how to decideOctober 25, 2026
- AI agent vs. chatbot: what's the difference?October 24, 2026
- Autonomous AI agents: how much should you let them do?October 12, 2026
- AI agent memory: how agents remember (and forget)October 11, 2026
Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score