Workspace CLI by EYAL.CC is a personal command-line tool that lets Eyal Avitan read and edit his own Google Workspace content — Docs, Sheets, Drive, Gmail, Calendar and Tasks — directly from a terminal, without opening a browser.
What it does
The tool is a thin command-line wrapper around the public Google Workspace REST APIs. It runs entirely on the operator’s own computer. A typical session looks like this:
gws docs documents get --params '{"documentId": "..."}'
gws drive files list --params '{"pageSize": 10}'
gws sheets spreadsheets get --params '{"spreadsheetId": "..."}'Every command is issued by hand or by a local script. There is no background process, no scheduler and no server component.
Who it is for
This is private, single-operator software built for the maintainer’s own workflow. It is not distributed, not sold, and not offered as a service to third parties. If you have reached this page from a Google consent screen and you did not start that sign-in yourself, close the window and grant nothing.
What it accesses
The application requests access only to the Google Account that authorises it, and it cannot see any other person’s account. The exact permissions it asks for, and the reason for each, are set out in the table below.
Why the application requests each permission
The application requests the narrowest set of permissions that lets its commands work. Each one is listed below with the reason it is needed. No permission is used for any purpose other than carrying out a command the operator has typed.
| OAuth scope | Google classification | Why the application needs it |
|---|---|---|
auth/documents | Sensitive | Open, read and edit the Google Docs document named in a command — the tool’s primary purpose. |
auth/spreadsheets | Sensitive | Read and write cell ranges in a named Google Sheets spreadsheet. |
auth/presentations | Sensitive | Read and edit a named Google Slides presentation. |
auth/drive | Restricted | Locate a document by name before it can be opened, and create, move or export files. Docs, Sheets and Slides all live in Drive, so file-level access is required for any command that takes a file name rather than a raw file ID. |
auth/gmail.modify | Restricted | Read, search, label and draft mail from the terminal. modify is requested rather than full mail access because the tool never needs to delete a mailbox or manage settings. |
auth/calendar | Sensitive | List, create and update events on the operator’s own calendars. |
auth/tasks | Sensitive | Read and write the operator’s task lists. |
auth/cloud-platform | Sensitive | Read which Google APIs are enabled on the operator’s own Google Cloud project, which gws auth status reports so the operator can see why a command failed. It is not used to access any other person’s Cloud resources. |
openid, userinfo.email, userinfo.profile | Basic | Identify which account signed in, so the stored credential can be labelled with its email address. |
Access is granted by the account holder on Google’s own consent screen and can be withdrawn at any time at myaccount.google.com/permissions.
Where the data goes
Nowhere. Responses from Google are printed to the terminal or written to a local file chosen by the operator. Nothing is transmitted to eyal.cc, to any analytics provider, or to any other third party.
Documents
Brand and identity
The logo above is the EYAL.CC brand mark — the same identity used across eyal.cc and published as the organisation logo in the structured data of every page on this site. It represents Eyal Avitan, the sole operator and publisher of this application. It is an original mark and is not affiliated with, endorsed by, or derived from any other brand.
Contact
Eyal Avitan — [email protected] — eyal.cc