feat: replace google drive tool bundle with Google Drive MCP server (#708)

* init google drive conversion

* wip: add tools to server.py

* fix: example client

* fix: readme

* feat: add tests

* fix: read credential from env thus support single user usage

* fix: get access token from custom http header, based on #3279

* wip: adding all necessary pieces

* fix: optional params

* fix: pytest

* fix: ruff and remove code not needed

Author: tybalex

.github/workflows/google-drive-build.yaml.yaml

@@ -0,0 +1,58 @@
+name: Build release google-drive
+
+permissions:
+  id-token: write
+  contents: read
+  packages: write
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - 'google/drive/**'
+    branches:
+      - main
+
+jobs:
+  oss-tools-build:
+    runs-on: depot-ubuntu-22.04
+    concurrency:
+      group: google-drive-build
+      cancel-in-progress: true
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ secrets.GHCR_USERNAME }}
+          password: ${{ secrets.GHCR_TOKEN }}
+
+      - name: Build and Push Docker image
+        uses: depot/build-push-action@v1
+        id: build-and-push
+        with:
+          project: bbqjs4tj1g
+          context: ./google/drive
+          push: true
+          pull: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/${{ github.repository }}/google-drive:latest
+
+      - name: Install Cosign
+        uses: sigstore/[email protected]
+        with:
+          cosign-release: 'v2.4.3'
+
+      - name: Sign Images
+        env:
+          DIGEST: ${{ steps.build-and-push.outputs.digest }}
+          TAGS: ghcr.io/${{ github.repository }}/google-drive:latest
+        run: |
+          images=""
+          for tag in ${TAGS}; do
+            images+="${tag}@${DIGEST} "
+          done
+          cosign sign --yes ${images}

google/drive/.python-version

@@ -0,0 +1 @@
+3.13

google/drive/Dockerfile

@@ -0,0 +1,27 @@
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+
+# Prevents Python from writing .pyc files and buffers stdout/stderr
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+# Install system deps (if any needed) - using apt for Debian
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy uv project files first for better Docker layer caching
+COPY pyproject.toml uv.lock ./
+
+# Copy your application code (needed for local package build)
+COPY . .
+
+# Install dependencies using uv sync (faster and more reliable)
+RUN uv sync --frozen --no-dev --no-editable
+
+EXPOSE 9000
+
+# Start the server using uv run (ensures proper virtual environment)
+CMD ["uv", "run", "python", "-m", "app.server"]

google/drive/README.md

@@ -0,0 +1,44 @@
+# Obot Google Drive MCP Server
+
+## Installation & Running
+
+### Docker-compose
+Export (Google's) Oauth CLient ID and Secret for Oauth Proxy
+```bash
+export OAUTH_CLIENT_ID=xxx
+export OAUTH_CLIENT_SECRET=xxx
+```
+
+then:
+```bash
+docker-compose up
+```
+
+### Using uvx
+install from local directory:
+```bash
+uvx --from . obot-google-drive-mcp
+```
+
+### Option 2: Using uv (Development)
+Install dependencies:
+```bash
+uv pip install
+```
+
+Run the server:
+```bash
+uv run server.py
+```
+
+## Testing
+
+### Unit-test with pytest
+```
+uv run python -m pytest
+```
+
+### Integration Testing
+
+#### Get Your Access Token
+This MCP server assumes Obot will take care of the Oauth2.0 flow and supply an access token. To test locally or without Obot, you need to get an access token by yourself. I use [postman workspace](https://blog.postman.com/how-to-access-google-apis-using-oauth-in-postman/) to create and manage my tokens.

google/drive/apis/workspace_file.py

@@ -2,7 +2,7 @@
 from google.oauth2.credentials import Credentials
 from googleapiclient.discovery import build
 from googleapiclient.errors import HttpError
-import os
+from fastmcp.exceptions import ToolError
 import logging
 
 
@@ -32,39 +32,26 @@ def setup_logger(name, tool_name: str = "Google Drive Tool"):
 logger = setup_logger(__name__)
 
 
-def str_to_bool(value):
-    """Convert a string to a boolean."""
-    return str(value).lower() in ("true", "1", "yes")
+def get_client(cred_token: str, service_name: str = "drive", version: str = "v3"):
 
-
-def get_client(service_name: str = "drive", version: str = "v3"):
-    token = os.getenv("GOOGLE_OAUTH_TOKEN")
-    if token is None:
-        raise ValueError("GOOGLE_OAUTH_TOKEN environment variable is not set")
-
-    creds = Credentials(token=token)
+    creds = Credentials(token=cred_token)
     try:
         service = build(serviceName=service_name, version=version, credentials=creds)
         return service
     except HttpError as err:
-        print(err)
-        exit(1)
-
-
-def get_obot_user_timezone():
-    return os.getenv("OBOT_USER_TIMEZONE", "UTC").strip()
+        raise ToolError(f"HttpError retrieving google {service_name} client: {err}")
 
 
 def get_user_timezone(service):
     """Fetches the authenticated user's time zone from User's Google Calendar settings."""
     try:
         settings = service.settings().get(setting="timezone").execute()
         return settings.get(
-            "value", get_obot_user_timezone()
-        )  # Default to Obot's user timezone if not found
+            "value", "UTC"
+        )  # Default to UTC if not found
     except HttpError as err:
         if err.status_code == 403:
-            raise Exception(f"HttpError retrieving user timezone: {err}")
+            raise ToolError(f"HttpError retrieving user timezone: {err}")
         logger.error(f"HttpError retrieving user timezone: {err}")
         return "UTC"
     except Exception as e: