Can I use Google Vault as a CLI?

Yes. KosmoKrator exposes a Google Vault CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose Google Vault through MCP?

Yes. The KosmoKrator MCP gateway can expose selected Google Vault tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are Google Vault credentials stored?

Google Vault credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for Google Vault MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

Google Vault CLI for AI Agents

Use the Google Vault CLI from KosmoKrator to call Google Vault tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

Google Vault CLI Setup

Google Vault can be configured headlessly with `kosmokrator integrations:configure google-vault`.

Install, configure, and verify

# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure google-vault --enable --read allow --write ask --json
kosmokrator integrations:doctor google-vault --json
kosmokrator integrations:status --json

Credentials

Authentication type: Manual OAuth token oauth2_manual_token. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

No credentials are required.

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call

kosmo integrations:call google-vault.google_vault_operations_list '{}' --json

Provider shortcut

kosmo integrations:google-vault google_vault_operations_list '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands

kosmo integrations:docs google-vault --json
kosmo integrations:docs google-vault.google_vault_operations_list --json
kosmo integrations:schema google-vault.google_vault_operations_list --json
kosmo integrations:search "Google Vault" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

`google-vault.google_vault_operations_list`

Operations List (GET /v1/{+name}).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_operations_list '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_operations_list '{}' --json

`google-vault.google_vault_operations_cancel`

Operations Cancel (POST /v1/{+name}:cancel).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_operations_cancel '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_operations_cancel '{}' --json

`google-vault.google_vault_operations_get`

Operations Get (GET /v1/{+name}).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_operations_get '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_operations_get '{}' --json

`google-vault.google_vault_operations_delete`

Operations Delete (DELETE /v1/{+name}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_operations_delete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_operations_delete '{}' --json

`google-vault.google_vault_matters_get`

Matters Get (GET /v1/matters/{matterId}).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_get '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_get '{}' --json

`google-vault.google_vault_matters_remove_permissions`

Matters Remove Permissions (POST /v1/matters/{matterId}:removePermissions).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_remove_permissions '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_remove_permissions '{}' --json

`google-vault.google_vault_matters_add_permissions`

Matters Add Permissions (POST /v1/matters/{matterId}:addPermissions).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_add_permissions '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_add_permissions '{}' --json

`google-vault.google_vault_matters_count`

Matters Count (POST /v1/matters/{matterId}:count).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_count '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_count '{}' --json

`google-vault.google_vault_matters_create`

Matters Create (POST /v1/matters).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_create '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_create '{}' --json

`google-vault.google_vault_matters_update`

Matters Update (PUT /v1/matters/{matterId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_update '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_update '{}' --json

`google-vault.google_vault_matters_list`

Matters List (GET /v1/matters).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_list '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_list '{}' --json

`google-vault.google_vault_matters_reopen`

Matters Reopen (POST /v1/matters/{matterId}:reopen).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_reopen '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_reopen '{}' --json

`google-vault.google_vault_matters_close`

Matters Close (POST /v1/matters/{matterId}:close).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_close '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_close '{}' --json

`google-vault.google_vault_matters_delete`

Matters Delete (DELETE /v1/matters/{matterId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_delete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_delete '{}' --json

`google-vault.google_vault_matters_undelete`

Matters Undelete (POST /v1/matters/{matterId}:undelete).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_undelete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_undelete '{}' --json

`google-vault.google_vault_matters_holds_add_held_accounts`

Matters Holds Add Held Accounts (POST /v1/matters/{matterId}/holds/{holdId}:addHeldAccounts).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_add_held_accounts '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_add_held_accounts '{}' --json

`google-vault.google_vault_matters_holds_remove_held_accounts`

Matters Holds Remove Held Accounts (POST /v1/matters/{matterId}/holds/{holdId}:removeHeldAccounts).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_remove_held_accounts '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_remove_held_accounts '{}' --json

`google-vault.google_vault_matters_holds_delete`

Matters Holds Delete (DELETE /v1/matters/{matterId}/holds/{holdId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_delete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_delete '{}' --json

`google-vault.google_vault_matters_holds_get`

Matters Holds Get (GET /v1/matters/{matterId}/holds/{holdId}).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_get '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_get '{}' --json

`google-vault.google_vault_matters_holds_list`

Matters Holds List (GET /v1/matters/{matterId}/holds).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_list '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_list '{}' --json

`google-vault.google_vault_matters_holds_create`

Matters Holds Create (POST /v1/matters/{matterId}/holds).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_create '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_create '{}' --json

`google-vault.google_vault_matters_holds_update`

Matters Holds Update (PUT /v1/matters/{matterId}/holds/{holdId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_update '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_update '{}' --json

`google-vault.google_vault_matters_holds_accounts_list`

Matters Holds Accounts List (GET /v1/matters/{matterId}/holds/{holdId}/accounts).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_accounts_list '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_accounts_list '{}' --json

`google-vault.google_vault_matters_holds_accounts_create`

Matters Holds Accounts Create (POST /v1/matters/{matterId}/holds/{holdId}/accounts).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_accounts_create '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_accounts_create '{}' --json

`google-vault.google_vault_matters_holds_accounts_delete`

Matters Holds Accounts Delete (DELETE /v1/matters/{matterId}/holds/{holdId}/accounts/{accountId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_holds_accounts_delete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_holds_accounts_delete '{}' --json

`google-vault.google_vault_matters_saved_queries_create`

Matters Saved Queries Create (POST /v1/matters/{matterId}/savedQueries).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_saved_queries_create '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_saved_queries_create '{}' --json

`google-vault.google_vault_matters_saved_queries_delete`

Matters Saved Queries Delete (DELETE /v1/matters/{matterId}/savedQueries/{savedQueryId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_saved_queries_delete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_saved_queries_delete '{}' --json

`google-vault.google_vault_matters_saved_queries_get`

Matters Saved Queries Get (GET /v1/matters/{matterId}/savedQueries/{savedQueryId}).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_saved_queries_get '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_saved_queries_get '{}' --json

`google-vault.google_vault_matters_saved_queries_list`

Matters Saved Queries List (GET /v1/matters/{matterId}/savedQueries).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_saved_queries_list '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_saved_queries_list '{}' --json

`google-vault.google_vault_matters_exports_create`

Matters Exports Create (POST /v1/matters/{matterId}/exports).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_exports_create '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_exports_create '{}' --json

`google-vault.google_vault_matters_exports_delete`

Matters Exports Delete (DELETE /v1/matters/{matterId}/exports/{exportId}).

Write write

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_exports_delete '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_exports_delete '{}' --json

`google-vault.google_vault_matters_exports_get`

Matters Exports Get (GET /v1/matters/{matterId}/exports/{exportId}).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_exports_get '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_exports_get '{}' --json

`google-vault.google_vault_matters_exports_list`

Matters Exports List (GET /v1/matters/{matterId}/exports).

Read read

Parameters: none

Generic call

kosmo integrations:call google-vault.google_vault_matters_exports_list '{}' --json

Shortcut

kosmo integrations:google-vault google_vault_matters_exports_list '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

google-vault.google_vault_operations_list 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_operations_list --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_operations_cancel 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_operations_cancel --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_operations_get 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_operations_get --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_operations_delete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_operations_delete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_get 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_get --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_remove_permissions 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_remove_permissions --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_add_permissions 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_add_permissions --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_count 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_count --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_create 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_create --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_update 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_update --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_list 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_list --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_reopen 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_reopen --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_close 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_close --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_delete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_delete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_undelete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_undelete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_add_held_accounts 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_add_held_accounts --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_remove_held_accounts 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_remove_held_accounts --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_delete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_delete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_get 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_get --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_list 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_list --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_create 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_create --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_update 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_update --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_accounts_list 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_accounts_list --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_accounts_create 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_accounts_create --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_holds_accounts_delete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_holds_accounts_delete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_saved_queries_create 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_saved_queries_create --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_saved_queries_delete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_saved_queries_delete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_saved_queries_get 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_saved_queries_get --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_saved_queries_list 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_saved_queries_list --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_exports_create 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_exports_create --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_exports_delete 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_exports_delete --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_exports_get 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_exports_get --json

Parameter	Type	Required	Description
No parameters.

google-vault.google_vault_matters_exports_list 0 parameters

Schema command

kosmo integrations:schema google-vault.google_vault_matters_exports_list --json

Parameter	Type	Required	Description
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.