gogcli for OpenClaw
gogcli is an open-source Go CLI by Peter Steinberger (steipete) that exposes Gmail and Google Calendar to OpenClaw agents. Here's what it does, how to install it, whether it's safe, and how PortEden adds the access controls and audit log gogcli doesn't ship.
gogcli · google · gmail · calendar · openclaw
Add to your agent
Steps 1–2 are identical for every agent — install the porteden binary and authenticate once. Step 3 registers the skill with your runtime.
Install the PortEden CLI
OpenClaw skills delegate every API call to the porteden binary. Install once with Homebrew or Go.
brew install porteden/tap/porteden # orgo install github.com/porteden/cli/cmd/porteden@latest Authenticate
Browser-based login is recommended — credentials are written to your OS keyring. Token-based login is available for headless environments.
porteden auth login # headless / CIporteden auth login --token <PE_API_KEY> porteden auth status Install the gogcli skill
OpenClaw fetches the signed skill bundle and registers its commands with the agent.
openclaw skills install gogcli How it works
Is gogcli safe to use?
gogcli itself is open source, actively maintained, and stores credentials in your OS keychain — not in plaintext files. The 'safe' question is really about what the agent can do once gogcli is connected: gogcli does not restrict the agent's actions in any way. If you want safety guardrails (read-only mode, draft-only sending, contact blocking, audit logs), you need to put a control layer between gogcli and the agent — which is exactly what PortEden does.
gogcli vs gws (Google Workspace CLI)
gws is Google's own developer sample. It covers more of Google Workspace (Drive, Docs, Sheets, Chat in addition to email/calendar) but is explicitly 'not officially supported' and has the same fundamental gap as gogcli: no access controls, no audit trail. Pick gws if you need broad Workspace coverage; pick gogcli for tighter Gmail/Calendar focus. Pick PortEden if you need either provider plus Outlook and want enforceable rules.
gogcli + PortEden = the access layer gogcli is missing
PortEden runs as a proxy between OpenClaw and Google. Configure gogcli to call PortEden's API instead of Gmail/Calendar directly, and every request is filtered through your access rules: visibility, contact blocking, action limits, time windows, account scope, and field-level redaction. Every request is logged. One click revokes the agent's access entirely.
The same firewall behind every PortEden skill
- Provision to teams with role-based access policies
- Identity-aware execution — every call ties back to a user
- Signed, version-pinned skills
- Full audit trail on every tool call
- Field-level redaction at egress
Frequently asked questions
Is gogcli safe to use?
Does gogcli support Outlook or Exchange?
gogcli vs gws: which should I pick?
Related Skills
Use gogcli with the guardrails it was never going to ship.
gogcli is a fine bridge. PortEden gives you the access controls, audit trail, and one-click revocation that any agent touching a real inbox needs.
Regulated org or 200+ seats? Talk to sales →