Connect
Optimize
Secure
Announcing StackOne Defender: leading open-source prompt injection guard for your agent • Read More →
Production-ready Google Calendar MCP server with 37 extensible actions — plus built-in authentication, security, and optimized execution.
Coverage
Create, read, update, and delete across Google Calendar — and extend your agent's capabilities with custom actions.
Authentication
Per-user OAuth in one call. Your Google Calendar MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →Security
Every Google Calendar tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →Performance
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Google Calendar call.
Tools Discovery →A Google Calendar MCP server lets AI agents read and write Google Calendar data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Google Calendar MCP server ships with 37 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
Every action from Google Calendar's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Creates a new event on a calendar.
Imports an event. This action is used to add a private copy of an existing event to a calendar. Only events with an eventType of default may be imported.
Lists events on a calendar. Supports time range, search, and pagination.
Gets an event by ID.
Updates an event using patch semantics.
Moves an event to another calendar, i.e. changes an event's organizer. Note that only default events can be moved; birthday, focusTime, fromGmail, outOfOffice and workingLocation events cannot be moved.
Deletes an event.
Creates a secondary calendar. The authenticated user for the request is made the data owner of the new calendar.
Gets metadata for a calendar.
Updates metadata for a calendar. This method supports patch semantics. Note that each patch request consumes three quota units; prefer using a get followed by an update. The field values you specify replace the existing values. Fields that you don't specify in the request remain unchanged. Array fields, if specified, overwrite the existing arrays; this discards any previous array elements.
Deletes a calendar permanently.
Adds a calendar to the user's calendar list.
Gets a calendar from the user's calendar list.
Updates an existing calendar on the user's calendar list. This method supports patch semantics. The field values you specify replace the existing values. Fields that you don't specify in the request remain unchanged. Array fields, if specified, overwrite the existing arrays; this discards any previous array elements.
Unsubscribes from a shared calendar by removing it from the user's calendar list.
Creates an access control rule for a calendar.
Returns an access control rule.
Updates an access control rule. This method supports patch semantics. The field values you specify replace the existing values. Fields that you don't specify in the request remain unchanged.
Deletes an access control rule.
Lists all user settings for the authenticated user.
Gets a single user setting by ID.
Returns instances of the specified recurring event.
Lists the calendars in the user's calendar list.
Lists the rules in the access control list for a calendar.
Queries the free/busy information for a set of calendars within a time range.
Returns the color definitions for calendars and events.
Updates an event. This method does not support patch semantics and always updates the entire event resource. To do a partial update, perform a get followed by an update using etags to ensure atomicity.
Updates metadata for a calendar. This method does not support patch semantics and always updates the entire calendar resource.
Updates an existing calendar on the user's calendar list. This method does not support patch semantics and always updates the entire calendar list entry.
Updates an access control rule. This method does not support patch semantics and always updates the entire ACL rule.
Creates an event based on a simple text string.
Watch for changes to Events resources.
Clears a primary calendar. This action deletes all events associated with the primary calendar of an account.
Watch for changes to CalendarList resources.
Watch for changes to ACL resources.
Watch for changes to Settings resources.
Stop watching resources through this channel.
One endpoint. Any framework. Your agent is talking to Google Calendar in under 10 lines of code.
MCP Clients
Agent Frameworks
{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}77+ actions
69+ actions
54+ actions
52+ actions
48+ actions
42+ actions
39+ actions
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
origin_owner_id.All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.