// SCAN REPORT

Google Workspace

34 tools. 15 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

15 can modify or destroy data

19 read-only

34 tools total

Community server · catalogue entry verified 12/06/2026

How to control Google Workspace ↓

TOOL MAP

What Google Workspace exposes to your agents

Read (19) Write / Execute (13) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Google Workspace tools

Destructive · High drive_delete_comment This tool permanently removes a comment, which cannot be undone. Destructive · High sheets_clear_values Clearing cell values removes data from the spreadsheet. Write · Medium sheets_batch_update The tool modifies spreadsheet content and structure but does not delete sheets permanently (deleteSheet is listed but is typically reversible via undo/recovery), format data irreversibly, or execute arbitrary code. Write · High docs_batch_update This tool modifies an existing Google Doc by inserting, updating, or deleting content.

15 of Google Workspace's 34 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Google Workspace

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Workspace, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "drive_delete_comment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "docs_batch_update": {
    "limits": [
      {
        "counter": "docs_batch_update_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "calendar_freebusy_query": {
    "limits": [
      {
        "counter": "calendar_freebusy_query_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Workspace — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Free to start. No card required.

FULL CATALOGUE

All 34 Google Workspace tools

DESTRUCTIVE 2 tools

Destructive drive_delete_comment Delete a comment from a Google Doc. Args: - file_id (string): The ID of the Google Doc - comment_id (stri Destructive sheets_clear_values Clear cell values from a specific range in a Google Spreadsheet (keeps formatting). Args: - spreadsheet_id

WRITE 13 tools

Write docs_batch_update Apply batch updates to a Google Doc (insert/update/delete text, formatting, images, tables). Args: - docume Write docs_create_document Create a new Google Doc with an optional initial body. Args: - title (string): The title for the new docume Write sheets_append_values Append rows of data to the end of a table in a Google Spreadsheet. Args: - spreadsheet_id (string): The ID Write sheets_duplicate_sheet Duplicate a sheet within the same spreadsheet. Args: - spreadsheet_id (string): The ID of the Google Spread Write drive_copy_file Create a copy of a file in Google Drive. Args: - file_id (string): The ID of the file to copy - name (str Write drive_create_comment Add a comment to a Google Doc. Can be anchored to specific text or unanchored. Args: - file_id (string): Th Write drive_reply_to_comment Reply to an existing comment on a Google Doc. Args: - file_id (string): The ID of the Google Doc - commen Write drive_resolve_comment Mark a comment as resolved on a Google Doc. Args: - file_id (string): The ID of the Google Doc - comment_ Write gmail_create_draft Create a new email draft in Gmail. The draft is saved but NOT sent automatically. Args: - to (string[]): Ar Write sheets_batch_update Apply batch updates to a Google Spreadsheet (formatting, charts, filters, conditional formatting, etc.). Args Write sheets_create_pivot_table Create a pivot table from spreadsheet data with full Google Sheets UI feature support. Args: - spreadsheet_ Write sheets_create_spreadsheet Create a new Google Spreadsheet with optional sheet names. Args: - title (string): The title for the new sp Write sheets_update_values Write cell values to a specific range in a Google Spreadsheet. Args: - spreadsheet_id (string): The ID of t

READ 19 tools

Read calendar_freebusy_query Check availability (free/busy times) for one or more calendars within a time range. This is useful for findin Read calendar_get_event Get detailed information about a specific calendar event. Args: - calendar_id (string): Calendar ID (defaul Read calendar_list_calendars List all calendars accessible to the user. Args: - response_format ( Read calendar_list_events List events from a calendar within an optional time range. Args: - calendar_id (string): Calendar ID (defau Read docs_get_document Retrieve the content of a Google Doc by its ID. Args: - document_id (string): The ID of the Google Doc (fou Read drive_get_file Download and return the content of a file from Google Drive. Supports PDFs, images, and other binary files. A Read drive_list_comments List comments on a Google Doc. Args: - file_id (string): The ID of the Google Doc - include_deleted (bool Read drive_list_files List files in your Google Drive. Args: - page_size (number): Max files to return, 1-100 (default: 20) - p Read drive_search_files Search for files in your Google Drive by name or content. Args: - query (string): Search query - searches f Read gmail_get_attachment Download an attachment from a Gmail message. Args: - message_id (string): The ID of the message containing Read gmail_get_message Get the full content of a specific Gmail message. Args: - message_id (string): The message ID to retrieve Read gmail_get_thread Get all messages in a conversation thread. Args: - thread_id (string): The thread ID to retrieve - respon Read gmail_list_attachments List all attachments in a specific Gmail message. Args: - message_id (string): The ID of the message to lis Read gmail_list_labels List all labels (folders) in Gmail. Args: - response_format ( Read gmail_list_messages List messages from Gmail with optional search filters. Args: - query (string, optional): Gmail search query Read gmail_list_threads List conversation threads from Gmail. Args: - query (string, optional): Gmail search query to filter thread Read sheets_batch_get_values Read cell values from multiple ranges in a Google Spreadsheet in a single request. Args: - spreadsheet_id ( Read sheets_get_spreadsheet Retrieve metadata and optionally cell data from a Google Spreadsheet. Args: - spreadsheet_id (string): The Read sheets_get_values Read cell values from a specific range in a Google Spreadsheet. Args: - spreadsheet_id (string): The ID of

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Google Workspace

Can an AI agent delete data through the Google Workspace MCP server? +

Yes. The Google Workspace server exposes 2 destructive tools including drive_delete_comment, sheets_clear_values. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Google Workspace? +

The Google Workspace server has 13 write tools including docs_batch_update, docs_create_document, sheets_append_values. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Google Workspace.

How many tools does the Google Workspace MCP server expose? +

34 tools across 3 categories: Destructive, Read, Write. 19 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on Google Workspace? +

Register the Google Workspace MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Workspace tool call.

Deterministic rules across all 34 Google Workspace tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Free to start. No card required.

34 Google Workspace tools catalogued and risk-classified — across an index of 43,000+ MCP servers.