Google Drive setup guide

Agents find, read and write your company's documents and files.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Google Drive, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Google Drive can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

Your Google OAuth app

Your OAuth app.

This way signs in with an OAuth app you create for Google Drive, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. In Google Cloud console (https://console.cloud.google.com), create or choose a project, open APIs & Services > Library and enable the Google Drive API.
2. Open Google Auth platform > Branding and fill in the app name and support email. Under Audience, choose Internal if you use Google Workspace. An External app left in Testing gets refresh tokens that expire after 7 days.
3. Under Data Access, add the scope https://www.googleapis.com/auth/drive.
4. Under Clients, choose Create Client > Web application and add the authorized redirect URI https://everdeck.io/api/oauth/callback.
5. Copy the Client ID and Client secret into the form, then sign in with the Google account the agent should work as.

The scopes Everdeck asks for:

• https://www.googleapis.com/auth/drive

When you disconnect, Everdeck asks Google Drive to revoke the sign-in, then deletes the tokens it saved.

Google service account

Service account.

1. In Google Cloud console, enable the Google Drive API, then open IAM & Admin > Service Accounts and create a service account.
2. On the service account's Keys tab, choose Add key > Create new key > JSON and paste the file's contents here. Organizations created on or after May 3, 2024 block key creation by default; an organization admin has to allow it for this project.
3. Give the service account access in one of two ways: share the shared drives or folders the agent needs with the service account's email address (a service account has no storage of its own, so it can create files only in shared drives), or (Google Workspace) set up domain-wide delegation and enter the user to act as.
4. For domain-wide delegation, copy the service account's Client ID, then in the Google Admin console open Security > Access and data control > API controls > Manage Domain Wide Delegation > Add new, paste the Client ID and add the scope https://www.googleapis.com/auth/drive.

Field	What to enter
Service account key (JSON file contents)	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.
User to act as (domain-wide delegation only) (optional)	Email address. For example [email protected].

The scopes Everdeck asks for:

• https://www.googleapis.com/auth/drive

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Google Drive until you delete or rotate it there.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• Search filesTier 0 · ReadReads outside contentgoogle_drive_search_files

  Find files and folders with a Drive query across My Drive and shared drives. Returns id, name, type, last change, link and owner.

• List a folderTier 0 · ReadReads outside contentgoogle_drive_list_folder

  List the files and subfolders inside a folder. Use folder_id root for the top of My Drive.

• Get file detailsTier 0 · ReadReads outside contentgoogle_drive_get_file

  Read a file's details, including its folder, owners, last editor and who it is shared with.

• Read a fileTier 0 · ReadReads outside contentgoogle_drive_read_file

  Read a file's text. Google Docs come back as Markdown, Sheets as CSV (first sheet), Slides as plain text; text, PDF and Office files are converted to text where possible.

• Create a folderTier 2 · ReversibleReads outside contentgoogle_drive_create_folder

  Create a folder inside another folder (root for the top of My Drive).

• Upload or create a fileTier 2 · ReversibleReads outside contentgoogle_drive_upload_file

  Create a file from text you write (or a file in the company's Spaces) in a folder. Set convert_to to document to turn Markdown or HTML into a Google Doc, or to spreadsheet to turn CSV into a Google Sheet.

• Copy a fileTier 2 · ReversibleReads outside contentgoogle_drive_copy_file

  Copy a file (for example a template) into a folder under a new name.

• Move a fileTier 3 · ExternalReads outside contentgoogle_drive_move_file

  Move a file to another folder. Needs approval by default because the file takes on the sharing of its new folder, which can expose it to more people.

• List commentsTier 0 · ReadReads outside contentgoogle_drive_list_comments

  Read the comment threads on a file, with replies and whether each is resolved.

• Comment on a fileTier 2 · ReversibleReads outside contentgoogle_drive_add_comment

  Add a comment to a file. It appears in the file's comment panel for everyone with access.

• Reply to a commentTier 2 · ReversibleReads outside contentgoogle_drive_reply_to_comment

  Reply to a comment thread on a file.

• Share a fileTier 4 · Money or irreversibleReads outside contentgoogle_drive_share_file

  Give a person access to a file or folder as reader, commenter or writer, and email them a link.

What can start work

These events from Google Drive can become tasks for your agents through Intake. How Intake works.

A file the connected account can see was created or edited.

Connect Google Drive first. Then, on the Intake page, open Webhooks and sources, find it under Connector triggers and select Start watching. Then, on the Rules tab, select New rule to say which requests become tasks and who gets them.

A new file appeared in a folder the company chooses (for example an Invoices inbox folder).

Connect Google Drive first. Then, on the Intake page, open Webhooks and sources, find it under Connector triggers and select Start watching. Then, on the Rules tab, select New rule to say which requests become tasks and who gets them.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Google Drive later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Google Drive, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.