Skip to content
Remote MCP · OAuth · 9 tools
Calendar logo

Calendar MCP Server: Secure AI Agent Access to Google Calendar and Outlook

Connect Claude, ChatGPT, and Cursor to Google Calendar and Outlook through PortEden's remote MCP server. 9 tools, OAuth, and a data firewall that controls every event read and write.

Connect to Claude

Free tier · No credit card required

What is the Calendar MCP server?

The calendar MCP server lets AI agents read schedules and manage events through the Model Context Protocol. Connect a client like Claude, ChatGPT, or Cursor to one remote endpoint at https://mcp.porteden.com/calendar and the agent works across Google Calendar and Outlook at once, including Microsoft 365 calendars, with no per-provider setup.

PortEden's server exposes 9 calendar tools, from listing calendars and searching events to free/busy checks, creating, updating, deleting, and responding to invitations. What makes it different from a generic Google Calendar or Outlook MCP is the data firewall in front of those tools: PortEden inspects every tool-call request, applies your access policy, and redacts attendee details in the response before the agent ever sees them.

The result is secure calendar access for AI agents. You decide whether a client can only read availability or can also create and delete events, hide attendees and event titles, scope access to specific calendars, and review every call in an audit log. OAuth handles authentication, so there is no static key to leak.

All 9 Calendar MCP tools

Every tool can be allowed or denied per client. Access levels are enforced at the firewall on each call.

ToolAccessWhat it does
calendar_listreadList all calendars for the connected account.
calendar_search_eventsreadSearch and list calendar events in a date range.
calendar_get_eventreadGet full details of a single event by its ID.
calendar_freebusyreadCheck availability for a date range without exposing event details.
calendar_events_by_contactreadFind all events shared with a specific contact.
calendar_create_eventcreateCreate a new calendar event.
calendar_update_eventwriteUpdate an existing event.
calendar_respond_to_eventwriteRespond to an invitation (accept, decline, or tentative).
calendar_delete_eventdeleteDelete an event.

Connect Calendar to Claude, ChatGPT, Cursor, and more

Point any MCP-compatible client at the remote URL and sign in to PortEden once with OAuth.

# Claude Web or Desktop, then Settings, Connectors, Add custom connector
https://mcp.porteden.com/calendar 
 
# Authenticate to PortEden once with OAuth. Claude can now call the
# calendar tools under the access policy you set.

Available on Claude Pro, Team, and Enterprise. The same flow works for Claude Cowork.

The security-first Calendar MCP

PortEden is the data firewall for AI.

Granular access control

Decide exactly what each AI client can do with your calendar. Keep a scheduling agent read-only, expose availability without event details, or scope a connection to a single calendar, so an agent never touches the events it should not.

  • Read-only by default: deny create, update, delete, and respond for a scheduling-assistant agent.
  • Free/busy only: expose availability through calendar_freebusy and hide event titles and attendees.
  • Per-calendar scope: pin a client to your work calendar and block personal calendars.
Learn more about granular access control

Data redaction

PortEden runs a redaction pass on every tool response before it leaves the firewall. Attendee details and event content are replaced with stable placeholders, so the agent can reason over your schedule without the raw data entering the model's context.

  • Strip attendee email addresses, phone numbers, and dial-in details from event responses.
  • Mask event titles and descriptions while keeping start, end, and free/busy readable.
  • Round-trip updates are de-redacted server-side, so an edit aimed at a placeholder lands on the right event.
Learn more about data redaction

Audit trail

Every calendar tool call is recorded: which client, which user, which tool, the arguments passed, the policy decision, and the redacted response. Export it or stream it to your SIEM for review.

  • See exactly which events an agent read and which it created, updated, or deleted, with timestamps.
  • Reconstruct any tool call: the request, the rule that fired, and the response returned.
  • Stream to Splunk, Datadog, or S3 for retention and review.
Learn more about audit trail

RBAC and policy groups

Bind each MCP connection to a user or role with a scoped, revocable token. Group policies by team so a new hire inherits the right calendar access on day one, and revocation is instant and server-side.

  • Issue per-user tokens scoped to the verbs and calendars that role needs.
  • Apply one policy group across a team instead of editing rules client by client.
  • Revoke a token server-side the moment a contract ends, with no Google or Microsoft account round-trip.
Learn more about rbac and policy groups

Set up the secure Calendar MCP in minutes

1

Add the connector

In your AI client, add a custom connector or HTTP MCP server pointing at https://mcp.porteden.com/calendar.

2

Authenticate with OAuth

Sign in to PortEden once and connect Google Calendar or Outlook. The client never holds your provider refresh token.

3

Set your calendar policy

Choose read-only, free/busy only, or read-write, scope to specific calendars, and turn on attendee redaction.

4

Verify in the audit log

Run a prompt, then watch the tool calls land in your PortEden audit log with the rule that fired on each one.

Works with every MCP client
Claude DesktopClaude WebChatGPTCursorWindsurfClineZed

Calendar MCP FAQ

What is the calendar MCP server?
It is a remote MCP (Model Context Protocol) server that lets MCP-compatible AI clients like Claude, ChatGPT, and Cursor read schedules and manage events through a single hosted endpoint at https://mcp.porteden.com/calendar. One server covers both Google Calendar and Outlook, and PortEden puts a data firewall in front of all 9 tools so you control what the AI can see and do.
How do I connect Claude to Google Calendar using MCP?
In Claude Web or Desktop, open Settings, then Connectors, then Add custom connector, and paste https://mcp.porteden.com/calendar. Authenticate to PortEden once with OAuth and connect your Google Calendar. Claude can then call the calendar tools. The same URL works in ChatGPT Connectors and in Cursor's MCP settings.
Does the calendar MCP server work with Outlook Calendar?
Yes. The same server handles Google Calendar and Outlook (Microsoft 365 and Outlook.com). Tools like calendar_search_events and calendar_freebusy work across every connected provider. You connect each provider once through PortEden's OAuth flow.
Can I give an AI agent free/busy access only?
Yes. Allow calendar_freebusy and calendar_list while denying calendar_get_event, calendar_search_events, and the write tools. The agent can then schedule around your availability without ever reading event titles, attendees, or descriptions. Redaction can also mask those fields when you do allow event reads.
Is the calendar MCP server secure?
That is the whole point of PortEden. The connection uses OAuth, so there is no static key to leak. Every tool call passes through a policy decision, attendee details are redacted before the agent sees them, and every call is written to an audit log. You can keep a client read-only, expose free/busy only, and scope access to specific calendars.
Does redaction hide attendees from the agent?
It can. PortEden replaces attendee email addresses, phone numbers, and dial-in details with stable placeholders before the response leaves the firewall, so the agent can reason about a meeting without holding the real contact data. Round-trip updates are de-redacted server-side, so an edit aimed at a placeholder lands on the right event.
What calendar tools does the MCP server expose?
Nine tools: calendar_list, calendar_search_events, calendar_get_event, calendar_freebusy, and calendar_events_by_contact for reading; calendar_create_event for new events; calendar_update_event and calendar_respond_to_event for changes; and calendar_delete_event for removal. Each tool can be allowed or denied per client.
Which AI clients work with the calendar MCP server?
Any MCP-compatible client. That includes Claude Desktop, Claude Web, ChatGPT (via Connectors), Cursor, Windsurf, Cline, and Zed. Point the client at the remote URL and authenticate once.
Does it cost anything to use the calendar MCP server?
There is a free tier that covers 1,000 tool calls per month. Paid plans raise the limit. A tool call is one MCP request, so a search returning 50 events is one call, not 50. See the pricing page for current limits.

Keep Exploring

Connect Calendar to AI, without leaking the underlying data.

Five-minute setup over OAuth. The free tier covers 1,000 tool calls per month.

See pricing