Connect Gmail to MailMan.

Prerequisites and requested access

Hosted Gmail currently uses Composio-managed OAuth. Its fixed requested scopes include full-mail access (https://mail.google.com/), contacts and profile information, including email details, language, addresses, birthdays and phone numbers. Review every permission on Google’s actual consent screen before continuing.

MailMan controls and Google permissions

Read and Write switches restrict MailMan operations. They do not reduce Google’s requested OAuth scopes or provider grant. Choosing Read only does not make the current hosted consent read-only, and disabling Write does not revoke an existing Google grant. The configured requested scopes do not establish the permissions retained by every older connection.

Separately configured direct Google adapter

The direct Google adapter is not enabled on this hosted service. Its read configuration requests gmail.readonly, gmail.settings.basic, openid and email; its write configuration requests https://mail.google.com/, gmail.settings.basic, openid and email. Those separate direct-adapter scope choices do not apply to the current hosted broker connection.

Connect

1. 01

   Sign in to the existing application, open Mailboxes and choose Add mailbox.

2. 02

   Choose Google, select the intended mailbox and complete consent.

3. 03

   On return, review Read and Write. Available access may be enabled immediately.

4. 04

   Use Test, then try listing accounts and one read-only search from your client.

Provider differences

Google Workspace administrators may restrict consent. Google approval of this OAuth application is not established. Permanent deletion requires the full mail grant.

If it fails

Permission denied: inspect grants and the Mailboxes controls. Connection expired: use Test, then Reconnect if the provider rejects authorization. A consent flow that cannot finish may need the service operator or provider administrator; do not switch working endpoints.

Disconnect

Use Disconnect in Mailboxes to remove stored credentials and stop future account calls. Remove the provider grant or app password in the provider's settings to revoke provider-side access as well.

Try a read-only task

After connecting, use the Mailboxes first-task panel to search one selected account. Read access is sufficient; inspect the source account and errors before adding more work.

Verified read-only check / October 21, 2026

Verified on October 21, 2026: Claude Code 2.1.306 listed authorized accounts and ran a bounded Gmail search using a personal access token and an existing mailbox connection. This check used an existing grant. New OAuth connections, provider reconnection, other clients and providers, full messages, attachments, sending and hosted Routes were not verified by this check.