MonitorWorkspace Is Now a Google-Verified OAuth App

The scary warning screen is gone.

When MonitorWorkspace launched the beta last year, anyone who authorized the app saw a Google "unverified app" warning and had to click through two extra screens to proceed. We explained in the beta announcement that this was a timing issue — Google reviews every application that requests access to Workspace data, and that review takes months. The warning disappears when the review passes.

It passed. We are now a Google-verified OAuth application.

What Changed

Google's Third Party Data Safety Team reviewed every scope MonitorWorkspace requests — 14 in total — and approved them all. Those scopes cover read access to Gmail, Chat spaces and messages, your user directory, admin roles, domain configuration, group membership, and license assignments. There is also write access for Gmail settings and email insertion, which powers the email transfer workflow.

From this point forward, no one in your organization will see the "unverified app" warning when they authorize MonitorWorkspace. The consent screen shows the MonitorWorkspace name and logo alongside the exact list of permissions being granted, in plain language.

What "Verified" Actually Means

Google's OAuth verification process is not automatic. It requires a detailed review of how the application uses each scope it requests. The review team confirms that every permission is genuinely necessary for the stated functionality and that the application handles data in accordance with Google's API Services User Data Policy.

For IT admins, this matters in two concrete ways.

First, your organization's app allowlist policies work with verified apps. If your Workspace domain restricts which third-party apps can request OAuth access, verified status makes the allowlisting process straightforward — you can allow by app ID rather than carving out exceptions for untrusted sources.

Second, any user in your domain who signs in to MonitorWorkspace gets a clean, clear consent screen. No alarm bells, no "Advanced — are you sure?" detours. Just the standard OAuth flow that Workspace admins recognize from Google's own applications.

The 14 Approved Scopes

The verification covers read access across:

• Gmail messages and settings
• Google Chat spaces, messages, and memberships
• Google Admin directory (users, groups, group members, domains, roles)
• Admin reports and usage data
• Google Workspace license assignments
• App Marketplace orders

And write access for:

• Gmail message insertion (email transfer destination)
• Gmail filter and forwarding settings (transfer configuration)
• Group membership updates (group health remediation)

These are the same scopes that have been in the app since launch. Verification does not change what MonitorWorkspace can access — it confirms that what we request is appropriate for what we do.

Annual Recertification

Google requires verified apps to recertify annually. We will submit for recertification before the one-year mark each year. If we ever add new scopes — for features that require additional permissions — we will submit a new verification request before those features become available. You will not be surprised by new permission requests.

What to Do Now

If you are an existing beta user, nothing changes in your dashboard. The verification does not alter how MonitorWorkspace works — it only removes the friction at sign-in.

If your organization was waiting for verified status before authorizing the app, the beta program is still open. You can sign in now with a clean consent screen and get 12 months of free access.

If you are a Workspace admin responsible for your domain's third-party app policy, MonitorWorkspace is now listed as a verified application and can be managed through your Admin Console like any other verified Google OAuth integration.