// SCAN REPORT

Smartsheet MCP Server

27 tools. 10 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

10 can modify or destroy data

17 read-only

27 tools total

Community server · catalogue entry verified 03/07/2026

How to control Smartsheet MCP Server ↓

TOOL MAP

What Smartsheet MCP Server exposes to your agents

Read (17) Write / Execute (7) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Smartsheet MCP Server tools

Destructive · High smartsheet_delete_attachment Permanent deletion of attachments that cannot be recovered constitutes an irreversible destructive action. Destructive · High smartsheet_delete_comment This tool irreversibly removes data (a comment) from a Smartsheet discussion. Destructive · High smartsheet_delete_rows This tool irreversibly deletes data (rows and associated cell data) with no undo capability. Write · Medium smartsheet_add_columns Adding columns to a sheet modifies the structure of data reversibly.

10 of Smartsheet MCP Server's 27 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Smartsheet MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Smartsheet MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "smartsheet_delete_attachment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "smartsheet_add_columns": {
    "limits": [
      {
        "counter": "smartsheet_add_columns_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "smartsheet_browse_folder": {
    "limits": [
      {
        "counter": "smartsheet_browse_folder_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Smartsheet MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SMARTSHEET →

Instant setup, no code required.

FULL CATALOGUE

All 27 Smartsheet MCP Server tools

DESTRUCTIVE 3 tools

Destructive smartsheet_delete_attachment Permanently delete an attachment from a Smartsheet sheet. This action is IRREVERSIBLE. Verify the attachment I Destructive smartsheet_delete_comment Permanently delete a comment from a discussion on a sheet. Only the comment author can delete their own commen Destructive smartsheet_delete_rows Permanently delete one or more rows from a Smartsheet sheet. This operation is IRREVERSIBLE. Deleted rows and

WRITE 7 tools

Write smartsheet_add_columns Add one or more new columns to a Smartsheet sheet. Supported column types: TEXT_NUMBER, DATE, DATETIME, PICKLI Write smartsheet_add_comment Add a reply comment to an existing discussion on a sheet. Args: - sheet_id (number): Target sheet ID - di Write smartsheet_add_rows Add one or more rows to a Smartsheet sheet. Each row specifies cells as columnId/value pairs. Rows can be posi Write smartsheet_attach_url_to_row Attach a URL link to a specific row in a Smartsheet sheet. Creates a hyperlink attachment that appears in the Write smartsheet_create_row_discussion Create a new discussion (with initial comment) on a specific row in a sheet. Args: - sheet_id (number): Tar Write smartsheet_create_sheet_discussion Create a new discussion (with initial comment) at the sheet level in Smartsheet. Args: - sheet_id (number): Write smartsheet_update_rows Update one or more existing rows in a Smartsheet sheet. Each row update specifies the row ID and cells to chan

READ 17 tools

Read smartsheet_browse_folder Get the contents of a Smartsheet folder: sheets, reports, sub-folders, and dashboards. Args: - folder_id (n Read smartsheet_browse_workspace Get the full contents of a workspace: all sheets, reports, folders, and dashboards. Use this to discover what Read smartsheet_get_cell_history Retrieve the full modification history for a specific cell in a Smartsheet sheet. Shows all previous values, w Read smartsheet_get_columns Retrieve all column definitions for a Smartsheet sheet. Returns column IDs, titles, types (TEXT_NUMBER, DATE, Read smartsheet_get_report Retrieve data from a Smartsheet report by ID. Reports aggregate rows from multiple sheets. Returns columns, ro Read smartsheet_get_sheet Retrieve sheet data from Smartsheet including columns, rows, and cell values. Supports optional filtering by c Read smartsheet_get_sheet_version Get the current version number of a sheet without loading all row data. Use this to efficiently detect whether Read smartsheet_list_attachments List all attachments on a Smartsheet sheet (both sheet-level and row-level). Returns attachment name, type, si Read smartsheet_list_dashboards List all Smartsheet dashboards (Sights) the authenticated user has access to. Args: - page_size (number, op Read smartsheet_list_reports List all reports the authenticated user has access to. Returns report name, ID, permalink, access level, and m Read smartsheet_list_row_attachments List all attachments on a specific row in a Smartsheet sheet. Args: - sheet_id (number): Target sheet ID Read smartsheet_list_row_discussions Retrieve all discussions attached to a specific row in a sheet. Args: - sheet_id (number): Target sheet ID Read smartsheet_list_sheet_discussions Retrieve all discussions on a sheet (both sheet-level and row-level discussions). Returns discussion titles, c Read smartsheet_list_sheets List all sheets the authenticated user has access to, with pagination support. Returns sheet name, ID, permali Read smartsheet_list_workspaces List all Smartsheet workspaces the authenticated user has access to. Returns workspace name, ID, access level, Read smartsheet_search Search across all accessible Smartsheet assets (sheets, reports, dashboards, rows, cells, discussions). Return Read smartsheet_search_sheet Search for text within a specific Smartsheet sheet. Searches cell values, formulas, comments, and summary fiel

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Smartsheet MCP Server

Can an AI agent delete data through the Smartsheet MCP Server MCP server? +

Yes. The Smartsheet MCP Server server exposes 3 destructive tools including smartsheet_delete_attachment, smartsheet_delete_comment, smartsheet_delete_rows. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Smartsheet MCP Server? +

The Smartsheet MCP Server server has 7 write tools including smartsheet_add_columns, smartsheet_add_comment, smartsheet_add_rows. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Smartsheet MCP Server.

How many tools does the Smartsheet MCP Server MCP server expose? +

27 tools across 3 categories: Destructive, Read, Write. 17 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on Smartsheet MCP Server? +

Register the Smartsheet MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Smartsheet MCP Server tool call.

Deterministic rules across all 27 Smartsheet MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SMARTSHEET →

Instant setup, no code required.

27 Smartsheet MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.