---
id: "asgard-ext-gmail"
lang: "en"
name: "Gmail"
vendor: "Google"
product: "Gmail"
category: "communication"
summary: "Lets the Agent work with Gmail: search and read mail, draft or send replies, and label or archive, from a shared mailbox or each end user's own."
url: "https://www.asgard-ai.com/extensions/asgard-ext-gmail"
docs: "https://developers.google.com/workspace/gmail/api"
source: null
usages: ["build-time","shared-account","personal-account"]
produces: ["OAuthProvider","OAuthCredential","Workflow","Toolset","SkillSet","Agent"]
requires: {"asgard_cli":">=0.2.1","skills":[],"extensions":[],"platform":["connector"]}
command: "asgard-cli extension get asgard-ext-gmail"
handoff: "Use asgard-cli to get the asgard-ext-gmail Extension. Help me decide which routes to use. Then start the rollout."
updated: "2026-11-05"
---

# Gmail

Lets Asgard Agents work with Gmail: search and read messages and attachments, write drafts, send or reply, and add labels, archive or mark as read. It can work on one shared mailbox (e.g. a support or sales inbox) with a shared account (e.g. an organization account), or on each end user's (e.g. members of the organization) own mailbox. Which of these it may do is chosen when the deployment is designed; anything that sends mail asks for confirmation first.

## Supported uses

| Use | What it does |
|---|---|
| Design time | While the deployment is being designed, the FDE Agent first looks at the mailbox: which labels there are, how much mail arrives, who it comes from and what kinds of attachments it carries, without keeping the content |
| Shared mailbox, signed in once | Once live, the Agent works on one shared mailbox with a shared account (e.g. an organization account; a dedicated system account is best). Someone signs in with that account once; its keys stay on the platform, out of reach of end users and the AI |
| Shared mailbox, delegated by an administrator | The same, but instead of signing in, a Google Workspace administrator lets a service account act as that one mailbox. Nobody has to click Allow, and it keeps working when the account's password changes |
| Personal mailbox | Each end user connects their own Google account once in Sindri, and the Agent reads, drafts or sends only from that person's mailbox. Asgard keeps each person's keys for them |

## What you need

- Google Workspace. Mailboxes outside the organization (personal @gmail.com accounts) are not covered by this version.
- A Google Cloud project with an OAuth client, or a service account for the delegated option. If there isn't one, the FDE Agent walks you through creating it step by step (about 15 minutes); with Workspace the client can be set to Internal, with no Google verification.
- Shared mailbox: an account for that mailbox, ideally a dedicated system account. Delegated option: a Google Workspace super administrator, who grants the access once in the Admin console.
- Personal mailbox: each end user clicks Allow once, the first time they use it.