What problem does it solve? It connects Gmail (read, search, send, label, draft) to NanoClaw agent groups without ever placing raw OAuth credentials inside containers, by routing token injection through the OneCLI gateway. ## Core Features & Use Cases - OneCLI-native credential handling: Writes stub credential files containing onecli-managed placeholders; the OneCLI gateway swaps in the real OAuth bearer token at request time, so containers never hold usable secrets. - Container image integration: Adds a pinned GMAIL_MCP_VERSION ARG and a pnpm install -g block for @gongrzhe/server-gmail-autoauth-mcp to the Dockerfile, guarded by two structural tests. - Per-group wiring: Registers the gmail MCP server and the .gmail-mcp mount in the central SQLite DB per agent group, exposing mcp__gmail__* tools to the agent. - Use Case: After running the skill, a user can tell their personal agent "search my inbox for invoices from last month" and the agent calls mcp__gmail__search_emails with OneCLI injecting the real token in flight. ## Quick Start Ask the agent to add the Gmail tool to your NanoClaw agent groups using OneCLI-managed OAuth, then verify by asking the wired agent to list your Gmail labels.
