# Gmail and Google Set up a private Google connection for our automations, then send us 2 values. About 15 minutes. > **AI agents:** follow the rules at https://guide.upliftedconsulting.com/start-here/for-ai-agents.md. Never show the key in chat; deliver it only through a OneTimeSecret link. ## Inputs from Uplifted Consulting needed before starting If the client doesn't have these, stop this tool and mark it blocked (optional items have a default). - The redirect URL for our automation tool (n8n) - Which Google tools to switch on (Gmail, Drive, Sheets, Calendar) > **Good to know:** > - **What we need:** 2 values (a Client ID and a Client Secret), then one short sign-in > - **Time:** about 15 minutes, plus a 5-minute sign-in at the end > - **Who can do this:** anyone with the Google account we are automating. For company accounts, an admin is best. > - **Plan needed:** none. This part of Google Cloud is free. ## What is happening here Google does not give out simple keys for Gmail. Instead, you create a small private "connection" in Google Cloud. It belongs to you. Only your account (or your company) can use it. There are 4 parts: 1. Create a project. This is a folder in Google Cloud. 2. Switch on Gmail (and any other Google tools we need). 3. Fill in a short form about the connection. 4. Create the keys and send them to us. At the end you sign in once with Google to say "yes, allow this". ## Before you start - Which Google tools we need. We will tell you. Usually Gmail. Sometimes also Google Drive, Sheets or Calendar. - The **redirect address** we sent you. It looks like `https://YOUR-N8N-DOMAIN/rest/oauth2-credential/callback`. - [OneTimeSecret](https://eu.onetimesecret.com) open in another tab. [How it works](https://guide.upliftedconsulting.com/start-here/sending-securely.md). - Know which kind of account you have: #### Google Workspace (company email) Your email ends in your company name, like `name@yourcompany.com`, and you pay Google for it. This is the easier path. Follow the **Google Workspace** tabs below. #### Personal Gmail Your email ends in `@gmail.com`. This works too, but needs one extra step, and the connection may need a refresh every 7 days. Follow the **Personal Gmail** tabs below. ## Step 1: Create a project ### Step 1: Open Google Cloud Go to [console.cloud.google.com](https://console.cloud.google.com). Log in with the Google account we are automating. If asked, accept the terms. ### Step 2: Open the project list At the top of the page, click the project picker. It may say **Select a project**. ### Step 3: Create a new project Click **New project**. Name it `n8n automations`. Leave the other fields as they are. Click **Create**. ### Step 4: Select it Wait a few seconds. Open the project picker again and click your new project. Its name now shows at the top of the page. > **Done:** > Always check the project name at the top before each step below. ## Step 2: Switch on the Google tools ### Step 1: Open the API Library Go to [the API Library](https://console.cloud.google.com/apis/library). You can also use the menu: **APIs & Services** then **Library**. ### Step 2: Switch on Gmail Search for **Gmail API**. Click it. Click **Enable**. ### Step 3: Switch on the others we asked for Go back to the Library. Do the same for each tool on our list: - **Google Drive API** - **Google Sheets API** - **Google Calendar API** - **Google Docs API** Only switch on the ones we asked for. > **Note:** > If we need Sheets or Docs, also switch on **Google Drive API**. They need it to work. ## Step 3: Fill in the connection form Google calls this the **Google Auth Platform**. It used to be called the "OAuth consent screen". ### Step 1: Open Google Auth Platform Go to [Google Auth Platform](https://console.cloud.google.com/auth/overview). Click **Get started**. ### Step 2: App information For **App name**, type `n8n automations`. For **User support email**, pick your own email. Click **Next**. ### Step 3: Audience: who can use it This choice matters. Pick based on your account type. #### Google Workspace Choose **Internal**. Click **Next**. Internal means only people in your company can use it. Google does not need to review it. The connection does not expire. #### Personal Gmail Choose **External**. Click **Next**. **Internal** is greyed out for personal Gmail. That is normal. ### Step 4: Contact information Type your email address. Click **Next**. ### Step 5: Finish Tick the box to agree to the **Google API Services: User Data Policy**. Click **Continue**, then **Create**. ### Personal Gmail only: add yourself as a test user #### Google Workspace Skip this. Go to Step 4. #### Personal Gmail ### Step 1: Open Audience In the Google Auth Platform menu on the left, click **Audience**. ### Step 2: Add test users Under **Test users**, click **Add users**. Type the Gmail address we are automating. Click **Save**. > **Careful:** > Your connection is in **Testing** mode. In this mode Google ends the sign-in after **7 days**. We will tell you if we need to change this. See "The connection stopped after 7 days" below. ## Step 4: Create the keys ### Step 1: Open Clients In the Google Auth Platform menu on the left, click **Clients**. Or go to [the Clients page](https://console.cloud.google.com/auth/clients). ### Step 2: Create a client Click **Create client**. ### Step 3: Choose the type For **Application type**, choose **Web application**. For **Name**, type `n8n`. ### Step 4: Add our redirect address Scroll to **Authorized redirect URIs**. Click **Add URI**. Paste the redirect address we sent you. > **Careful:** > Paste it exactly. No space at the start or end. One wrong letter and the sign-in fails. ### Step 5: Create Leave **Authorized JavaScript origins** empty. Click **Create**. ### Step 6: Copy both values now A window opens with your **Client ID** and **Client Secret**. Copy both into a note, each with its name. > **Careful:** > **Google only shows the Client Secret this one time.** Copy it before you close the window. You can also click **Download JSON** to save a copy. If you lose it, see "I closed the window before copying the secret" below. ## Step 5: Send it to us - [Send it with OneTimeSecret](https://guide.upliftedconsulting.com/start-here/sending-securely.md): Put both values into **one** OneTimeSecret note. Create the link and send us **only the link**. Label it "Google client". Your note should look like this: ```text Client ID: 1234567890-abc...apps.googleusercontent.com Client Secret: GOCSPX-... ``` ## Step 6: Sign in with Google (5 minutes) This is the last step. We set up the connection in our automation tool (n8n). Then we send you a link, and you approve it with your Google account. ### Step 1: Click 'Sign in with Google' Open the link we sent you and click **Sign in with Google**. ### Step 2: Pick your account Choose the Google account we are automating. ### Step 3: Approve Google lists what the connection can do, for example "Read, compose and send emails". Tick the boxes if shown. Click **Continue** or **Allow**. #### Google Workspace You should go straight through. #### Personal Gmail You will see **Google hasn't verified this app**. This is expected. The app is yours, so it is safe. Click **Continue**. > **Done:** > Done. We will confirm the connection works. ## Simpler alternative Don't want to do Steps 1 to 5? We can skip them. We use our own existing Google connection instead. You only do Step 6, with a sign-in link we send you. - This only works if your company allows it. Some Google Workspace admins block outside apps. If yours does, your admin can allow our app, or you follow the full guide above. - For personal Gmail, Google may show a warning or limit how long the sign-in lasts. We will tell you before you start. Reply to our email if you want this option. ## Something not right? ### I can't choose Internal **Internal** only works for company Google Workspace accounts that have an organization in Google Cloud. If it is greyed out on a company account, your project may have been created outside your company organization. Ask your Google Workspace admin to create the project, or choose **External** and follow the Personal Gmail steps. ### I closed the window before copying the secret No problem. Go to **Clients**, click the client named `n8n`. Under **Client secrets**, click **Add secret**. Copy the new secret straight away. You can then delete the old one. ### The sign-in says 'redirect_uri_mismatch' The redirect address does not match ours. Go to **Clients**, open `n8n`, and check **Authorized redirect URIs**. Fix it, click **Save**, and wait 5 minutes. Google can take a while to update. ### The sign-in says 'Access blocked' or 'access_denied' For personal Gmail: the account is not a test user. Add it under **Audience** then **Test users**. For Google Workspace: your admin may block outside apps. Send them this page. ### The connection stopped after 7 days (personal Gmail) This is Google's rule for apps in **Testing** mode. Do Step 6 again to reconnect. To stop it happening, we may ask you to go to **Audience** and click **Publish app**. Your app is then "In production" but unverified: you will keep seeing the "Google hasn't verified this app" warning, but the sign-in no longer ends after 7 days. We will guide you if this is needed. Last checked: 22 Oct 2026 against [n8n's Google OAuth docs](https://docs.n8n.io/integrations/builtin/credentials/google/oauth-single-service/), [Google's OAuth client docs](https://support.google.com/cloud/answer/15549257) and [Google's audience docs](https://support.google.com/cloud/answer/15549945). --- Source: https://guide.upliftedconsulting.com/services/gmail-google ยท Updated 2026-10-22