gws CLI scope review — M5 Max (ajmalafif@gmail.com)

gws-scopes-review.md

gws CLI — Final Setup for ajmalafif@gmail.com (M5 Max)

Project: gws-cli-m5-max
Date: 2026-04-10
Status: Active and verified

---

Services — All Read + Write

Service	Read	Write	Scope	Status
Gmail	Yes	Yes	gmail.modify	Verified
Drive	Yes	Yes	drive	Verified
Calendar	Yes	Yes	calendar	Verified
Sheets	Yes	Yes	spreadsheets	Verified
Docs	Yes	Yes	documents	Verified
Slides	Yes	Yes	presentations	Enabled
People / Contacts	Yes	Yes	contacts	Enabled
Chat	Yes	Yes	chat.messages, chat.spaces	Enabled
Forms	Yes	Yes	forms.body	Enabled
Meet	Yes	Yes	meetings.space.created	Enabled
Apps Script	Yes	Yes	script.projects	Enabled

Dropped

Service	Reason
Tasks	Uses Todoist instead
GCP / cloud-platform	Uses gcloud CLI instead
Keep	Restricted API, not used

---

Files on M5 Max

File	Purpose
~/.config/gws/credentials.enc	Encrypted OAuth credentials (AES-256-GCM)
~/.config/gws/client_secret.json	OAuth client config
Encryption key	Stored in macOS Keyring

Auth Command (for re-auth or other machines)

gws auth login --scopes "https://www.googleapis.com/auth/gmail.modify,https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/spreadsheets,https://www.googleapis.com/auth/documents,https://www.googleapis.com/auth/presentations,https://www.googleapis.com/auth/contacts,https://www.googleapis.com/auth/chat.messages,https://www.googleapis.com/auth/chat.spaces,https://www.googleapis.com/auth/forms.body,https://www.googleapis.com/auth/meetings.space.created,https://www.googleapis.com/auth/script.projects,openid,email,profile"

Quick Reference

# Gmail
gws gmail users getProfile --params '{"userId": "me"}'
gws gmail users messages list --params '{"userId": "me", "maxResults": 5}'

# Drive
gws drive files list --params '{"pageSize": 5}'

# Calendar
gws calendar events list --params '{"calendarId": "primary", "maxResults": 5}'

# Sheets
gws sheets spreadsheets get --params '{"spreadsheetId": "SHEET_ID"}'