// SCAN REPORT

Google Sheets MCP Server

27 tools. 18 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 3 Jul 2026

18 can modify or destroy data

9 read-only

27 tools total

Community server · catalogue entry verified 03/07/2026

How to control Google Sheets MCP Server ↓

TOOL MAP

What Google Sheets MCP Server exposes to your agents

Read (9) Write / Execute (17) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Google Sheets MCP Server tools

Destructive · High delete_table_rows This tool irreversibly removes data from a spreadsheet table based on match conditions. Write · Medium batch_update_cells This tool creates or modifies data reversibly—it updates cell values but does not delete data or execute code. Write · Medium add_columns This tool creates new columns in a spreadsheet, modifying the sheet structure. Write · Medium add_conditional_formatting This tool creates conditional formatting rules in Google Sheets, which is a Write operation—it modifies spreadsheet configuration reversibly without deleting data or executing external code.

18 of Google Sheets MCP Server's 27 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Google Sheets MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Sheets MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_table_rows": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_columns": {
    "limits": [
      {
        "counter": "add_columns_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "export_table_as_csv": {
    "limits": [
      {
        "counter": "export_table_as_csv_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Sheets MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE SHEETS →

Instant setup, no code required.

FULL CATALOGUE

All 27 Google Sheets MCP Server tools

DESTRUCTIVE 1 tools

Destructive delete_table_rows Deletes rows in a table matching criteria. match_conditions should be JSON object like {\"column_name\":\"valu

WRITE 17 tools

Write add_columns Adds columns to a sheet. Position is 1-based index after which to insert (omit to add at end). Write add_conditional_formatting Adds conditional formatting rule to a range. rule_config should be JSON with condition type, values, and forma Write add_rows Appends rows to the end of a sheet (after the last row with data). Data should be JSON 2D array. Write add_table_columns Adds new columns to an existing table. new_columns should be JSON array of column names. Write batch_update_cells Updates multiple ranges in one call. Ranges should be JSON object mapping range to 2D array like {\"A1:B2\":[[ Write copy_sheet Duplicates a sheet within a spreadsheet or to another spreadsheet. Write create_sheet Adds a new sheet (tab) to a spreadsheet. Write create_spreadsheet Creates a new spreadsheet with the specified title. Write create_table Creates a new logical table with headers and optional initial data. Headers should be JSON array, data should Write import_csv_to_table Imports CSV content into a table. csv_content should be CSV formatted string. Write insert_table_rows Inserts rows into a table. Rows should be JSON 2D array. Position is 1-based row index (excluding header, omit Write rename_sheet Renames an existing sheet. Write rename_table_column Renames a header in an existing table. Write share_spreadsheet Shares a spreadsheet with users. Recipients should be JSON array like [{\"email_address\":\"user@example.com\" Write update_cells Writes data to a specific range (overwrites existing data). Data should be JSON 2D array like [[1,2],[3,4]]. Write update_conditional_formatting Updates or moves an existing conditional formatting rule. Provide either rule_config to replace or new_index t Write update_table_rows Updates rows in a table matching criteria. Both match_conditions and updates should be JSON objects like {\"co

READ 9 tools

Read export_table_as_csv Exports a table to CSV format. Returns CSV data as string. Read get_multiple_sheet_data Fetches data from multiple ranges. Queries should be JSON array like [{\"spreadsheet_id\":\"abc\",\"sheet\":\" Read get_multiple_spreadsheet_summary Gets titles, sheet names, headers, and first few rows for multiple spreadsheets. spreadsheet_ids should be JSO Read get_sheet_data Reads data from a range in a sheet (A1 notation like 'A1:C10' or 'Sheet1!B2:D'). Read get_sheet_formulas Reads formulas from a range in a sheet. Read get_table_data Reads all or part of a table by name. Filters should be JSON object like {\"column_name\":\"value\"}. Read list_sheets Lists all sheet names within a spreadsheet. Read list_spreadsheets Lists spreadsheets in the configured Drive folder or accessible by the user. Read list_tables Lists all defined tables (named ranges or header-based logical tables) within a sheet or spreadsheet.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Google Sheets MCP Server

Can an AI agent delete data through the Google Sheets MCP Server MCP server? +

Yes. The Google Sheets MCP Server server exposes 1 destructive tools including delete_table_rows. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Google Sheets MCP Server? +

The Google Sheets MCP Server server has 17 write tools including add_columns, add_conditional_formatting, add_rows. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Google Sheets MCP Server.

How many tools does the Google Sheets MCP Server MCP server expose? +

27 tools across 3 categories: Destructive, Read, Write. 9 are read-only. 18 can modify, create, or delete data.

How do I enforce a policy on Google Sheets MCP Server? +

Register the Google Sheets MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Sheets MCP Server tool call.

Deterministic rules across all 27 Google Sheets MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE SHEETS →

Instant setup, no code required.

27 Google Sheets MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.