guide: Google

guides/google-people/external.md

@@ -4,7 +4,7 @@ setup_version: 1
 
 # Set up Google People
 
-You need a Google Cloud project and access to the [Google Cloud console](https://console.cloud.google.com). To enable the People API, you need `serviceusage.services.enable`, normally through **Service Usage Admin** or **Owner**. To grant project roles, you need **Project IAM Admin**. Before you begin, have the application or security owner configure prompt and response screening for malicious content or prompt injection; Model Armor is one option.
+You need a Google Cloud project and access to the [Google Cloud console](https://console.cloud.google.com). To enable the People API, you need `serviceusage.services.enable`, normally through **Service Usage Admin** or **Owner**. To grant project roles, you need **Project IAM Admin**. Each connecting user must already have access to the intended Google profile, contacts, and directory data. Google documents that application developers are responsible for screening prompts and responses for malicious content or prompt injection; Model Armor is one documented option.
 
 ### Enable the People API {#enable-people-api}
 
@@ -38,10 +38,13 @@ Google does not allow an OAuth consent screen to be removed after it is configur
 
 1. Open **Google Auth platform** > **Branding**.
 2. If the page shows **Google Auth platform not configured yet**, click **Get Started**.
+
+If Google Auth platform was already configured, retain its approved **Branding**. Retain its **Audience** only if it covers every intended connecting account. **Internal** qualifies only when all those accounts are in the Google Cloud organization associated with the project; otherwise use an approved **External** configuration. Then continue at step 14. Otherwise, complete the first-time wizard:
+
 3. Under **App Information**, enter `People API MCP Server` in **App name**.
 4. Select a monitored **User support email**.
 5. Click **Next**.
-6. Under **Audience**, select **Internal**. If **Internal** is unavailable, select **External**.
+6. Under **Audience**, select **Internal** only if every intended connecting account is in the Google Cloud organization associated with the project. Otherwise, use an approved **External** configuration.
 7. Click **Next**.
 8. Under **Contact Information**, enter a monitored **Email address**.
 9. Click **Next**.
@@ -50,8 +53,6 @@ Google does not allow an OAuth consent screen to be removed after it is configur
 12. Click **Continue**.
 13. Click **Create**.
 
-If Google Auth platform was already configured, retain its approved **Branding** and **Audience**.
-
 14. Open **Data Access**.
 15. Click **Add or Remove Scopes**.
 16. Under **Manually add scopes**, paste these three scope URLs:
@@ -66,7 +67,7 @@ If Google Auth platform was already configured, retain its approved **Branding**
 18. Click **Update**.
 19. Click **Save**.
 
-If you selected **External** and the app is in **Testing**, add every connecting account:
+An **External** app in **Testing** supports no more than 100 test users. Use this branch only when every intended connecting account fits within that ceiling:
 
 20. Open **Audience**.
 21. Under **Test users**, click **Add users**.
@@ -101,6 +102,6 @@ Prepare an approved secret store before the next step. The next dialog allows th
 3. Keep both values for [connecting your credentials](speakeasy.md#connect-speakeasy-credentials).
 4. Return to the Speakeasy AI Control Plane.
 
-If you miss the one-time secret, delete it and create a new one before continuing.
+If you miss the one-time secret, return to **Google Auth platform** > **Clients**. Delete the affected OAuth client using its visible or equivalent delete control. Repeat [Create the OAuth client](#create-oauth-client) and this credential-copy section before continuing.
 
 <!-- screenshot-exception: do not capture a dialog containing a one-time secret -->

guides/google-people/meta.yaml

@@ -25,11 +25,10 @@ credential_setup:
       description: A Google Cloud project where an administrator can enable the People API, grant project IAM roles, configure Google Auth platform, and create OAuth credentials
     - id: connecting-user-access
       description: Each connecting user has MCP Tool User on the project and access to the intended Google profile, contacts, and directory data
-    - id: prompt-injection-screening
-      description: An application or security owner has configured prompt and response screening for malicious content or prompt injection
 documentation:
   external: external.md
   speakeasy: speakeasy.md
+speakeasy_add_server: auto
 remotes:
   - id: hosted
     url: https://people.googleapis.com/mcp/v1
@@ -41,102 +40,90 @@ remotes:
         locator: https://developers.google.com/people/v1/configure-mcp-server
         name: Configure the People API MCP server
         classification: official
-        observed_at: "2026-07-29T21:55:51Z"
-      - source: endpoint-observation
-        locator: https://people.googleapis.com/mcp/v1
-        name: Google People API MCP endpoint
-        classification: official
-        observed_at: "2026-07-29T21:55:51Z"
+        observed_at: "2026-08-29T15:13:24Z"
       - source: endpoint-observation
         locator: https://people.googleapis.com/.well-known/oauth-protected-resource/mcp/v1
         name: Google People API MCP protected-resource metadata
         classification: official
-        observed_at: "2026-07-29T21:55:51Z"
+        observed_at: "2026-08-29T15:13:24Z"
 provenance:
   - source: provider-documentation
     locator: https://developers.google.com/people/v1/configure-mcp-server
     name: Configure the People API MCP server
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://developers.google.com/people/api/mcp
     name: People API MCP reference
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://developers.google.com/workspace/guides/enable-apis
     name: Enable Google Workspace APIs
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://developers.google.com/workspace/guides/configure-oauth-consent
     name: Configure the OAuth consent screen and choose scopes
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://developers.google.com/workspace/guides/create-credentials
     name: Create access credentials
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://developers.google.com/workspace/guides/configure-mcp-security
     name: Configure security for Google Workspace MCP servers
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://docs.cloud.google.com/mcp/supported-products
     name: Google and Google Cloud products with MCP support
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://docs.cloud.google.com/mcp/set-up-authentication-mcp-servers
     name: Set up authentication to Google and Google Cloud MCP servers
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://cloud.google.com/service-usage/docs/enable-disable
     name: Enable and disable services
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://docs.cloud.google.com/iam/docs/grant-role-console
     name: Grant an IAM role by using the Google Cloud console
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://support.google.com/cloud/answer/15549945
     name: Manage App Audience
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://support.google.com/cloud/answer/15549135
     name: Manage App Data Access
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: provider-documentation
     locator: https://support.google.com/a/answer/7281227
     name: Control which apps access Google Workspace data
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
-  - source: endpoint-observation
-    locator: https://people.googleapis.com/mcp/v1
-    name: Google People API MCP endpoint
-    classification: official
-    status: MCP initialize returned HTTP 200
-    version: "2025-03-26"
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: endpoint-observation
     locator: https://people.googleapis.com/.well-known/oauth-protected-resource/mcp/v1
     name: Google People API MCP protected-resource metadata
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: endpoint-observation
     locator: https://accounts.google.com/.well-known/oauth-authorization-server
     name: Google authorization-server metadata
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"
   - source: repository-doctrine
     locator: doctrine/speakeasy-setup.md
     name: Speakeasy setup canonical section
     classification: official
-    observed_at: "2026-07-29T21:55:51Z"
+    observed_at: "2026-08-29T15:13:24Z"