From gws
Authenticate and manage credentials for the gws CLI — login, logout, status, scopes, service accounts, and credential storage.
npx claudepluginhub fakoli/fakoli-plugins --plugin gwsThis skill uses the workspace's default tool permissions.
> **Note:** See the **gws-shared** skill for global flags and security rules.
Designs and optimizes AI agent action spaces, tool definitions, observation formats, error recovery, and context for higher task completion rates.
Designs, implements, and audits WCAG 2.2 AA accessible UIs for Web (ARIA/HTML5), iOS (SwiftUI traits), and Android (Compose semantics). Audits code for compliance gaps.
Compares coding agents like Claude Code and Aider on custom YAML-defined codebase tasks using git worktrees, measuring pass rate, cost, time, and consistency.
Note: See the gws-shared skill for global flags and security rules.
Manage authentication and credentials for the gws CLI.
gws auth login # Interactive OAuth2 login (opens browser)
gws auth logout # Remove stored credentials
gws auth setup # Guided first-run setup wizard
gws auth status # Show current auth state and active scopes
gws auth export # Export credentials for use in other tools
gws auth login
Default scopes: Drive, Sheets, Gmail, Calendar, Docs, Slides, Tasks.
gws auth login --full
Adds pubsub and cloud-platform scopes. Requires a verified OAuth app or Workspace domain admin approval.
gws auth login --scopes drive,gmail,sheets,pubsub
Unrecognized service names are resolved dynamically from Discovery docs.
gws auth login --readonly
Grants only .readonly scopes for all services.
GOOGLE_WORKSPACE_CLI_TOKEN — Pre-obtained OAuth2 access token (highest priority)GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILE — Path to OAuth credentials JSON~/.config/gws/GOOGLE_APPLICATION_CREDENTIALS — Standard Google ADC (fallback)export GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILE=/path/to/service-account.json
gws drive files list
~/.config/gws/ (override with GOOGLE_WORKSPACE_CLI_CONFIG_DIR)export GOOGLE_WORKSPACE_CLI_KEYRING_BACKEND=file| Variable | Description |
|---|---|
GOOGLE_WORKSPACE_CLI_TOKEN | Pre-obtained OAuth2 access token |
GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILE | Path to OAuth credentials JSON |
GOOGLE_WORKSPACE_CLI_CLIENT_ID | OAuth client ID |
GOOGLE_WORKSPACE_CLI_CLIENT_SECRET | OAuth client secret |
GOOGLE_WORKSPACE_CLI_CONFIG_DIR | Override config directory |
GOOGLE_WORKSPACE_CLI_KEYRING_BACKEND | keyring (default) or file |
GOOGLE_APPLICATION_CREDENTIALS | Standard Google ADC path |
gws auth setup # Guided wizard
gws auth status # Verify it worked
gws gmail +triage # Test with a read operation
gws auth status
gws auth login --scopes drive,gmail,sheets,calendar,pubsub,cloud-platform
gws auth login (minimal scopes) — add more later with --scopesgws auth status to verify permissions before running commandsGOOGLE_WORKSPACE_CLI_KEYRING_BACKEND=file and provide credentials via env varsgws auth export