Over the MCP connector there is no tool that tells the signed-in user which account they are actually connected as.
What exists today:
- get_profile returns the job-application profile (name, email, phone, location and so on). That is user-entered profile data, not the identity the session is authenticated with.
- Nothing exposes the account's own identity: the uid, the Google account id behind it, the sign-in provider, or the email the session is bound to.
Impact: a user working through the connector cannot answer "which account am I on?" The profile email may or may not match the account the token belongs to, and there is no way to tell from the connector. This matters when a user has more than one account, or when they want to confirm which identity an action was taken as.
Requested change: add a whoami-style tool (or extend an existing one) that returns the authenticated account's identity — uid including its provider prefix, the sign-in provider stated explicitly, the account email, display name, roles, and token expiry.
Note: the sibling ProAppStore platform has the same gap, tracked there as issue #136. Its whoami returns uid, login, roles and expiry but no email. Worth keeping the two shaped the same.
Over the MCP connector there is no tool that tells the signed-in user which account they are actually connected as.
What exists today:
Impact: a user working through the connector cannot answer "which account am I on?" The profile email may or may not match the account the token belongs to, and there is no way to tell from the connector. This matters when a user has more than one account, or when they want to confirm which identity an action was taken as.
Requested change: add a whoami-style tool (or extend an existing one) that returns the authenticated account's identity — uid including its provider prefix, the sign-in provider stated explicitly, the account email, display name, roles, and token expiry.
Note: the sibling ProAppStore platform has the same gap, tracked there as issue #136. Its whoami returns uid, login, roles and expiry but no email. Worth keeping the two shaped the same.