{
  "connector": "gmail",
  "label": "Gmail",
  "vendor_docs": "https://developers.google.com/workspace",
  "summary": "Gmail API v1 plus 128 simulated Workspace Directory, 6 Reports, and 24 People methods, exposed through REST, discovery, and MCP.",
  "surfaces": [
    {
      "kind": "REST",
      "path": "/gmail/v1",
      "notes": "Gmail API v1"
    },
    {
      "kind": "REST",
      "path": "/admin/directory/v1",
      "notes": "Workspace Admin SDK Directory API v1"
    },
    {
      "kind": "REST",
      "path": "/admin/reports/v1",
      "notes": "Workspace Admin SDK Reports API v1"
    },
    {
      "kind": "REST",
      "path": "/v1",
      "notes": "People API v1"
    },
    {
      "kind": "MCP",
      "path": "/mcp",
      "notes": "Gmail mailbox and Workspace directory and contacts tools"
    }
  ],
  "api_versions": [
    "Gmail v1",
    "Admin Directory v1",
    "Admin Reports v1",
    "People v1"
  ],
  "supported": [
    {
      "item": "128 tenant-scoped Directory methods for users, groups, members, org units, devices, printers, roles, and admin writes"
    },
    {
      "item": "6 Reports methods with graph-derived activity and reconciled usage"
    },
    {
      "item": "24 People methods for directory profiles, per-user contacts, contact groups, and sync state"
    },
    {
      "item": "Google discovery documents for Gmail, Directory, Reports, and People"
    },
    {
      "item": "Directory and People REST data is tenant-scoped and shared with MCP tools"
    }
  ],
  "unsupported": [
    {
      "item": "Real Workspace account provisioning, contact-photo bytes, and commands executed on real devices"
    }
  ],
  "differences": [
    {
      "scenario": "Reports activities",
      "difference": "Audit events are deterministic synthetic records derived from the company graph and simulator writes.",
      "guidance": "Assert on supported event shapes and ordering, not on a real Workspace audit log."
    },
    {
      "scenario": "OAuth scope enforcement",
      "difference": "Scope checks apply to signed mock-IdP tokens; open mode accepts opaque bearer tokens without scope claims.",
      "guidance": "Use a signed token with the requested Google scopes to test permission refusals."
    }
  ],
  "faults_supported": [
    {
      "fault": "throttle",
      "behaviour": "Google-shaped 429 rate-limit response for supported Gmail routes."
    }
  ]
}