honest-drive-mcp

Local Google Drive MCP server with full permission management — the piece missing from the official connector.

Companion project to honest-gmail-mcp and honest-calendar-mcp.

Why

The official Anthropic Drive connector is competent for read + create, but has one big gap: it cannot set or modify sharing permissions. If you build a workflow like "create a folder for my accountant and share it with her", you hit a dead end — you have to jump into the Drive UI to do the sharing part manually.

This MCP fixes that. Same trust model as the rest of the honest-* family: data flows only between your machine and Google.

Features

Eight tools exposed over MCP:

• list_files — search with Drive query syntax
• get_file — full metadata
• read_file — download content (text/JSON returned as UTF-8; binaries as base64; Google-native docs auto-exported to plain text / CSV)
• create_file — upload from text or base64
• create_folder — new folder, optionally inside a parent
• share_file — grant access to an email (reader/commenter/writer/owner), notification optional, custom message supported ← the piece missing elsewhere
• list_permissions — see who has access and with what role
• remove_permission — revoke a specific permission by id

Requirements

• Python 3.10+
• A Google account
• One-time Google Cloud OAuth setup (~10 min; can reuse the client from honest-gmail-mcp — just enable the Drive API on the same project)

Setup

git clone https://github.com/bartosz-kuc/honest-drive-mcp.git
cd honest-drive-mcp
python3 -m venv venv
./venv/bin/pip install -r requirements.txt

Google Cloud steps (same as honest-gmail-mcp):

1. https://console.cloud.google.com/ → create or select project
2. APIs & Services → Library → enable Google Drive API
3. APIs & Services → Credentials → OAuth client ID → Desktop app → download JSON → save as credentials.json here

First run:

./venv/bin/python server.py

Browser opens → Allow → token saved to token.json. Ctrl+C.

Register with Claude Code:

claude mcp add drive-personal /absolute/path/to/venv/bin/python /absolute/path/to/server.py

Claude Desktop claude_desktop_config.json:

{
  "mcpServers": {
    "drive-personal": {
      "command": "/absolute/path/to/venv/bin/python",
      "args": ["/absolute/path/to/server.py"]
    }
  }
}

Example usage

"Create a folder called 'Faktury dla księgowej' in My Drive and share it with elwira@example.pl as writer."

AI calls create_folder → gets folder_id → calls share_file(file_id, "elwira@example.pl", role="writer"). Done in one shot. No context-switch to the Drive UI.

"Who has access to file X?"

AI calls list_permissions(file_id) → returns all permissions with ids you can pass to remove_permission later.

Data flow

Your AI client
     ↕  MCP stdio
This server (Python, on your machine)
     ↕  HTTPS
Google Drive API

No cloud middle. Tokens stay on disk, .gitignored.

Security notes

• OAuth scope requested: drive (full read/write on all Drive files this account can access). Google does not offer a scope that includes permission management without also including read/write to files, which is why the scope is broad.
• send_notification defaults to false — AI will not spam recipients unless explicitly asked.
• role: "owner" transfers ownership — an irreversible action. The tool passes transferOwnership: true automatically when this role is requested; consider using writer unless you really mean to hand over the file.
• Revoke access anytime at https://myaccount.google.com/permissions.
• credentials.json and token.json are .gitignored.

Author

Bartosz Kuć — Warsaw-based developer, JDG owner running skanfirmy.pl.

• Site: https://skanfirmy.pl

• GitHub: https://github.com/bartosz-kuc

• Email: firma@bartosza.pl

Consulting

Available for consulting on Polish tax and business integrations (KSeF, GUS/NFZ/GIOŚ APIs, mBank data), MCP server design, and AI-assisted tooling for JDGs and small teams. See skanfirmy.pl/uslugi for productized packages (audit 3k PLN, setup 8-15k PLN, retainer 2-4k PLN/mo), or reach out via email.

License

MIT — see LICENSE.

Related

• honest-gmail-mcp — local Gmail MCP
• honest-calendar-mcp — local Google Calendar MCP
• ksef-mcp — Polish KSeF (e-invoicing) MCP
• nip-krs-mcp — Polish company registry MCP