diff --git a/agentclaw/app/agent_claw_main/tools/google_workspace.py b/agentclaw/app/agent_claw_main/tools/google_workspace.py
index 967955c..b660652 100644
--- a/agentclaw/app/agent_claw_main/tools/google_workspace.py
+++ b/agentclaw/app/agent_claw_main/tools/google_workspace.py
@@ -33,7 +33,11 @@ def _get_creds(actor_id: str) -> Credentials:
     print(f'[google] fetching creds actor={actor_id}')
     data = json.loads(_secrets().get_secret_value(SecretId=secret_name)['SecretString'])
     expiry_str = data.get('expiry')
-    expiry = datetime.fromisoformat(expiry_str.replace('Z', '+00:00')) if expiry_str else None
+    if expiry_str:
+        exp_aware = datetime.fromisoformat(expiry_str.replace('Z', '+00:00'))
+        expiry = exp_aware.replace(tzinfo=None)  # google-auth uses naive UTC datetimes
+    else:
+        expiry = None
     creds = Credentials(
         token=data.get('token'),
         refresh_token=data.get('refresh_token'),