
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@a1-x-tech/mcp-google-slides
Advanced tools
MCP server for the Google Slides API — create and edit presentations, slides, text, shapes, tables and images, manage speaker notes, comments, thumbnails and export. For Claude, Cursor, Codex and other AI clients.
English | Русский
A1 Google Slides MCP lets an AI app build and edit Google Slides presentations in plain language. Draft a deck, add and rearrange slides, write and style text, place shapes, images and tables, keep speaker notes, review comments and export the result as PDF or PPTX.
It uses the Google Slides API with your Google account. Everything inside a deck is addressed by explicit object ids, and it makes the limits of the Slides API explicit instead of implying that every presentation task is possible.
batchUpdate: one invalid request voids the whole batch, so a deck is never left half-edited.presentations; Drive scopes are required only for local images, comments and export.Start with a read-only question:
Show me the slides in the quarterly report deck and what's on each of them.
Connect the server · Explore use cases · Open technical documentation
You: List the slides of the Q3 review deck and what's on each one.
Assistant: Shows a compact inventory: every slide's position, layout and elements with their visible text. Nothing changes.
You: Prepare a new slide after the agenda titled “Roadmap”, with the key dates in the body.
Assistant: Shows the target deck, the layout and the proposed text, then asks for confirmation before adding it.
You: Confirm.
Assistant: Adds the slide and fills its placeholders. It does not touch the other slides.
You need Node.js 20+, a Google account and OAuth credentials from a Google Cloud project with the Google Slides API enabled.
In the app: open Settings → Plugins → MCP servers, select Add server, then add npx -y @a1-x-tech/mcp-google-slides@latest with GOOGLE_SLIDES_CLIENT_ID, GOOGLE_SLIDES_CLIENT_SECRET and GOOGLE_SLIDES_REFRESH_TOKEN.
From the command line:
codex mcp add google-slides \
--env GOOGLE_SLIDES_CLIENT_ID=your_client_id \
--env GOOGLE_SLIDES_CLIENT_SECRET=your_client_secret \
--env GOOGLE_SLIDES_REFRESH_TOKEN=your_refresh_token \
-- npx -y @a1-x-tech/mcp-google-slides@latest
codex mcp list
claude mcp add \
--env GOOGLE_SLIDES_CLIENT_ID=your_client_id \
--env GOOGLE_SLIDES_CLIENT_SECRET=your_client_secret \
--env GOOGLE_SLIDES_REFRESH_TOKEN=your_refresh_token \
--transport stdio --scope user google-slides \
-- npx -y @a1-x-tech/mcp-google-slides@latest
claude mcp list
Open Settings → Developer → Edit Config and add:
{
"mcpServers": {
"google-slides": {
"command": "npx",
"args": ["-y", "@a1-x-tech/mcp-google-slides@latest"],
"env": {
"GOOGLE_SLIDES_CLIENT_ID": "your_client_id",
"GOOGLE_SLIDES_CLIENT_SECRET": "your_client_secret",
"GOOGLE_SLIDES_REFRESH_TOKEN": "your_refresh_token"
}
}
}
}
If Edit Config is unavailable, edit ~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows.
Add this to ~/.cursor/mcp.json on macOS/Linux or %USERPROFILE%\.cursor\mcp.json on Windows:
{
"mcpServers": {
"google-slides": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@a1-x-tech/mcp-google-slides@latest"],
"env": {
"GOOGLE_SLIDES_CLIENT_ID": "your_client_id",
"GOOGLE_SLIDES_CLIENT_SECRET": "your_client_secret",
"GOOGLE_SLIDES_REFRESH_TOKEN": "your_refresh_token"
}
}
}
}
Run MCP: Open User Configuration and add:
{
"servers": {
"google-slides": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@a1-x-tech/mcp-google-slides@latest"],
"env": {
"GOOGLE_SLIDES_CLIENT_ID": "${input:slides_client_id}",
"GOOGLE_SLIDES_CLIENT_SECRET": "${input:slides_client_secret}",
"GOOGLE_SLIDES_REFRESH_TOKEN": "${input:slides_refresh_token}"
}
}
},
"inputs": [
{ "type": "promptString", "id": "slides_client_id", "description": "Google OAuth client ID" },
{ "type": "promptString", "id": "slides_client_secret", "description": "Google OAuth client secret", "password": true },
{ "type": "promptString", "id": "slides_refresh_token", "description": "Google OAuth refresh token", "password": true }
]
}
Check it with MCP: List Servers.
create_presentation creates a deck with one title slide; only the title is honored at creation.list_slides is the compact inventory to start from before any edit.batchUpdate: one invalid request voids the whole batch, so nothing is half-applied.The Slides API cannot delete, rename or share the presentation file — those are Drive file operations outside this server's scope. It cannot import a theme (only instantiate layouts the deck already has) and cannot anchor a new comment to a specific slide. Export is capped at 10 MB, and thumbnail URLs expire after about 30 minutes.
| Operation | What happens | Confirmation boundary |
|---|---|---|
| Inspect a deck, page, notes or comments; render a thumbnail; export a file | Reads data, writes only local files | No change |
| Create a presentation | Adds a new deck to your Google account | Changes Google Slides |
| Add, duplicate or move slides; create shapes, images, tables | Adds or rearranges deck content | Changes a deck |
| Set or style text, replace an image, transform an element, edit speaker notes or table structure | Overwrites existing content | Changes a deck |
| Find & replace across the deck | Changes every match at once | Changes a deck broadly |
| Delete a slide, element or comment thread | Removes content with no undo through the API | Destructive |
Raw batchUpdate or raw API request | Can call API methods without a dedicated tool | Potentially destructive |
The AI client controls confirmation prompts. The server marks reads, writes and destructive tools so the client can distinguish an inspection from a live change.
Google Slides requires OAuth 2.0; an API key is not enough.
Create or select a Google Cloud project and enable Google Slides API. Enable Google Drive API too if you want comments, export or local-image upload.
Configure the OAuth consent screen and create a Desktop app OAuth client.
Authorize the Google account that owns or can edit the presentations. The OAuth 2.0 Playground can obtain the refresh token when Use your own OAuth credentials is enabled.
Request the scopes:
https://www.googleapis.com/auth/presentations
https://www.googleapis.com/auth/drive.file
presentations covers all Slides reads and writes. drive.file covers local-image upload plus comments and export on decks created through this app; request the broader https://www.googleapis.com/auth/drive instead when you need comments or export on arbitrary presentations.
Testing-mode OAuth refresh tokens can expire after seven days. Publish the OAuth app, or use an Internal app in a Workspace domain, when you need long-lived access. Treat the client secret and refresh token as passwords.
| Variable | Required | Description |
|---|---|---|
GOOGLE_SLIDES_CLIENT_ID | Yes* | OAuth client ID. |
GOOGLE_SLIDES_CLIENT_SECRET | Yes* | OAuth client secret. |
GOOGLE_SLIDES_REFRESH_TOKEN | Yes* | OAuth refresh token. |
GOOGLE_SLIDES_ACCESS_TOKEN | Yes* | Short-lived (~1 h) alternative to the OAuth trio. |
GOOGLE_SLIDES_API_BASE | No | Google Slides API base URL override. |
GOOGLE_SLIDES_DRIVE_API_BASE | No | Google Drive API base URL override (internal dependency: comments, export, image upload). |
GOOGLE_SLIDES_TIMEOUT_MS | No | Per-request timeout; default 60000 ms. |
GOOGLE_SLIDES_MAX_RETRIES | No | Temporary-error retries; default 3. |
* Provide either the OAuth trio or an access token.
ASKADS_TELEMETRY=0 to opt out.429, the server uses backoff; reads also retry after network and 5xx errors, while writes are not replayed after an uncertain failure. Thumbnails count against a more expensive read quota.Found a bug or need a scenario? Create an issue or write in Telegram.
You made it to the end!
FAQs
MCP server for the Google Slides API — create and edit presentations, slides, text, shapes, tables and images, manage speaker notes, comments, thumbnails and export. For Claude, Cursor, Codex and other AI clients.
The npm package @a1-x-tech/mcp-google-slides receives a total of 29 weekly downloads. As such, @a1-x-tech/mcp-google-slides popularity was classified as not popular.
We found that @a1-x-tech/mcp-google-slides demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.