You need this from us first
- The redirect URL for our automation tool (n8n)
- Which Google tools to switch on (Gmail, Drive, Sheets, Calendar)
Don't have it? Ask your Uplifted contact.
- What we need
- 2 values (a Client ID and a Client Secret), then one short sign-in
- Time
- about 15 minutes, plus a 5-minute sign-in at the end
- Who can do this
- anyone with the Google account we are automating. For company accounts, an admin is best.
- Plan needed
- none. This part of Google Cloud is free.
What is happening here
Google does not give out simple keys for Gmail. Instead, you create a small private "connection" in Google Cloud. It belongs to you. Only your account (or your company) can use it.
There are 4 parts:
- Create a project. This is a folder in Google Cloud.
- Switch on Gmail (and any other Google tools we need).
- Fill in a short form about the connection.
- Create the keys and send them to us.
At the end you sign in once with Google to say "yes, allow this".
Before you start
- Which Google tools we need. We will tell you. Usually Gmail. Sometimes also Google Drive, Sheets or Calendar.
- The redirect address we sent you. It looks like
https://YOUR-N8N-DOMAIN/rest/oauth2-credential/callback. - OneTimeSecret open in another tab. How it works.
- Know which kind of account you have:
Google Workspace (company email)
Your email ends in your company name, like name@yourcompany.com, and you pay Google for it. This is the easier path. Follow the Google Workspace tabs below.
Personal Gmail
Your email ends in @gmail.com. This works too, but needs one extra step, and the connection may need a refresh every 7 days. Follow the Personal Gmail tabs below.
Step 1: Create a project
Open Google Cloud
Go to console.cloud.google.com. Log in with the Google account we are automating. If asked, accept the terms.
Open the project list
At the top of the page, click the project picker. It may say Select a project.
Create a new project
Click New project. Name it
n8n automations. Leave the other fields as they are. Click Create.Select it
Wait a few seconds. Open the project picker again and click your new project. Its name now shows at the top of the page.
Done
Always check the project name at the top before each step below.
Step 2: Switch on the Google tools
Open the API Library
Go to the API Library. You can also use the menu: APIs & Services then Library.
Switch on Gmail
Search for Gmail API. Click it. Click Enable.
Switch on the others we asked for
Go back to the Library. Do the same for each tool on our list:
- Google Drive API
- Google Sheets API
- Google Calendar API
- Google Docs API
Only switch on the ones we asked for.
Note
If we need Sheets or Docs, also switch on Google Drive API. They need it to work.
Step 3: Fill in the connection form
Google calls this the Google Auth Platform. It used to be called the "OAuth consent screen".
Open Google Auth Platform
Go to Google Auth Platform. Click Get started.
App information
For App name, type
n8n automations. For User support email, pick your own email. Click Next.Audience: who can use it
This choice matters. Pick based on your account type.
Google Workspace
Choose Internal. Click Next.
Internal means only people in your company can use it. Google does not need to review it. The connection does not expire.
Personal Gmail
Choose External. Click Next.
Internal is greyed out for personal Gmail. That is normal.
Contact information
Type your email address. Click Next.
Finish
Tick the box to agree to the Google API Services: User Data Policy. Click Continue, then Create.
Personal Gmail only: add yourself as a test user
Google Workspace
Skip this. Go to Step 4.
Personal Gmail
Open Audience
In the Google Auth Platform menu on the left, click Audience.
Add test users
Under Test users, click Add users. Type the Gmail address we are automating. Click Save.
Careful
Your connection is in Testing mode. In this mode Google ends the sign-in after 7 days. We will tell you if we need to change this. See "The connection stopped after 7 days" below.
Step 4: Create the keys
Open Clients
In the Google Auth Platform menu on the left, click Clients. Or go to the Clients page.
Create a client
Click Create client.
Choose the type
For Application type, choose Web application. For Name, type
n8n.Add our redirect address
Scroll to Authorized redirect URIs. Click Add URI. Paste the redirect address we sent you.
Careful
Paste it exactly. No space at the start or end. One wrong letter and the sign-in fails.
Create
Leave Authorized JavaScript origins empty. Click Create.
Copy both values now
A window opens with your Client ID and Client Secret. Copy both into a note, each with its name.
Careful
Google only shows the Client Secret this one time. Copy it before you close the window. You can also click Download JSON to save a copy. If you lose it, see "I closed the window before copying the secret" below.
Step 5: Send it to us
Send it with OneTimeSecret
Put both values into one OneTimeSecret note. Create the link and send us only the link. Label it "Google client".
Your note should look like this:
Client ID: 1234567890-abc...apps.googleusercontent.com
Client Secret: GOCSPX-...
Step 6: Sign in with Google (5 minutes)
This is the last step. We set up the connection in our automation tool (n8n). Then we send you a link, and you approve it with your Google account.
Click 'Sign in with Google'
Open the link we sent you and click Sign in with Google.
Pick your account
Choose the Google account we are automating.
Approve
Google lists what the connection can do, for example "Read, compose and send emails". Tick the boxes if shown. Click Continue or Allow.
Google Workspace
You should go straight through.
Personal Gmail
You will see Google hasn't verified this app. This is expected. The app is yours, so it is safe. Click Continue.
Done
Done. We will confirm the connection works.
Simpler alternative
Don't want to do Steps 1 to 5? We can skip them. We use our own existing Google connection instead. You only do Step 6, with a sign-in link we send you.
- This only works if your company allows it. Some Google Workspace admins block outside apps. If yours does, your admin can allow our app, or you follow the full guide above.
- For personal Gmail, Google may show a warning or limit how long the sign-in lasts. We will tell you before you start.
Reply to our email if you want this option.
Something not right?
I can't choose Internal
Internal only works for company Google Workspace accounts that have an organization in Google Cloud. If it is greyed out on a company account, your project may have been created outside your company organization. Ask your Google Workspace admin to create the project, or choose External and follow the Personal Gmail steps.
I closed the window before copying the secret
No problem. Go to Clients, click the client named n8n. Under Client secrets, click Add secret. Copy the new secret straight away. You can then delete the old one.
The sign-in says 'redirect_uri_mismatch'
The redirect address does not match ours. Go to Clients, open n8n, and check Authorized redirect URIs. Fix it, click Save, and wait 5 minutes. Google can take a while to update.
The sign-in says 'Access blocked' or 'access_denied'
For personal Gmail: the account is not a test user. Add it under Audience then Test users. For Google Workspace: your admin may block outside apps. Send them this page.
The connection stopped after 7 days (personal Gmail)
This is Google's rule for apps in Testing mode. Do Step 6 again to reconnect. To stop it happening, we may ask you to go to Audience and click Publish app. Your app is then "In production" but unverified: you will keep seeing the "Google hasn't verified this app" warning, but the sign-in no longer ends after 7 days. We will guide you if this is needed.
Last checked: 22 Oct 2026 against n8n's Google OAuth docs, Google's OAuth client docs and Google's audience docs.
Doing several tools? Tick them all on Your tools and get one prompt or checklist.