Google Workspace Integration

The Google Workspace integration brings each teammate’s work Gmail into the Muin unified communications inbox. Mail in the labels they choose appears alongside donor receipts and Muin-routed conversations, and AI suggested drafts are available on every thread.

The integration is read-only: Muin syncs mail in, and does not send from your Gmail address. Replying from within Muin on a connected mailbox isn’t supported yet — you reply from Gmail as usual.

The integration is per-user — every teammate authorizes their own mailbox in OAuth, tokens are encrypted at rest with the platform KMS, and nobody can see anyone else’s mail. A one-time admin trust step at admin.google.com flips off the “unverified app” warning for everybody on your domain.

What you can do

Inbound mail in one place

Unified inbox — selected Gmail labels (default INBOX) sync every 5 minutes via Gmail History delta queries.
Threading — incoming replies thread back into the same Muin conversation so donor + staff context stays together.
Reply from Muin — not available. Muin does not request send permission on your mailbox, so replies go out from Gmail. This is a planned capability, not a current one.

AI on real-mail context

Muin’s AI reply assistant reads the messages in the connected mailbox the user selected and proposes drafts. Prompt-injection sanitization strips control phrases out of inbound text; per-tenant cost/latency limits prevent runaway agent loops.

Privacy + visibility

Each connection is authorized by one user, and the admin view exposes only connection metadata (who connected, last sync, sync status).

Synced messages are not private to the connecting user. Mail pulled from a connected mailbox lands in the organization’s shared comms inbox, where any teammate with access can read it. Per-user message isolation is planned, not current — connect a mailbox only if team-wide visibility is what you want.

Setup at a glance

Workspace admin trust (one-time, ≤5 minutes). A super-admin signs in to admin.google.com → Apps → Web and mobile apps → Manage Third-Party App Access → Add app, and trusts Muin’s OAuth client. See Workspace admin setup.
Per-user connect. Each teammate goes to Settings → Communications → Connected mailboxes and signs in with Google.
Pick labels. Default is INBOX; users can change later.
Done. Backfill of the most recent 100 messages starts immediately; ongoing sync runs every 5 minutes.

Full step-by-step: Connect a Google Workspace mailbox.

Available on Google Workspace Marketplace

Muin is listed on the Google Workspace Marketplace. Workspace admins can discover Muin from the Marketplace search and install with one click — the install hand-off lands them in the Muin sign-in (existing customer) or signup (new customer) flow with their workspace domain prefilled.

The internal listing manifest lives at muin.server/docs/integrations/workspace-marketplace-listing.md and is the source-of-truth for everything submitted to Google.

Required OAuth scopes

Scope	Used for
`https://www.googleapis.com/auth/gmail.readonly` (selected labels only)	Sync inbound mail into the unified inbox; thread replies; AI draft context.
`email`, `openid`	Identify the connecting user.

We do not request gmail.send. Muin never sends from your Gmail address, so we don’t ask for permission to.

We do not request access to Drive, Calendar, Contacts, Chat, Meet, Sites, or any other Workspace service.

Personal Gmail

Connecting a personal @gmail.com account is not currently available. That flow existed only to send from your personal address (its inbound arrives via a Gmail forwarding rule, not the API), and sending from a connected mailbox isn’t supported yet — so there is nothing it would add. Read more.

Microsoft 365

Outlook + work Microsoft 365 mailboxes connect via the equivalent Microsoft 365 integration.