// SCAN REPORT

Google Workspace MCP Server

72 tools. 45 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

45 can modify or destroy data

27 read-only

72 tools total

Community server · catalogue entry verified 12/06/2026

How to control Google Workspace MCP Server ↓

TOOL MAP

What Google Workspace MCP Server exposes to your agents

Read (27) Write / Execute (38) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Google Workspace MCP Server tools

Destructive · High clearSpreadsheetRange Clearing all values from a spreadsheet range is irreversible data loss — once cleared, the original data cannot be recovered without a backup. Destructive · High deleteCalendarEvent This tool irreversibly deletes calendar events, which cannot be undone. Destructive · High deleteComment This tool permanently removes data (a comment) from a document. Destructive · High deleteFile This tool irreversibly removes data from Google Drive without recovery options.

45 of Google Workspace MCP Server's 72 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Google Workspace MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Workspace MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "clearSpreadsheetRange": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "clearBasicFilter": {
    "limits": [
      {
        "counter": "clearbasicfilter_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "findElement": {
    "limits": [
      {
        "counter": "findelement_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Workspace MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Free to start. No card required.

FULL CATALOGUE

All 72 Google Workspace MCP Server tools

DESTRUCTIVE 7 tools

Destructive clearSpreadsheetRange Clears all values from a specific range in a Google Spreadsheet. Destructive deleteCalendarEvent Delete a calendar event. Destructive deleteComment Deletes a comment from the document. Destructive deleteFile Permanently deletes a file or folder from Google Drive. Destructive deleteGmailFilter Delete a Gmail filter. Destructive deleteGmailLabel Delete a Gmail label. Cannot delete system labels. Destructive deleteRange Deletes content within a specified range (start index inclusive, end index exclusive) from the document or a s

EXECUTE 1 tools

Execute updateScriptContent Updates the content of an Apps Script project. You can add multiple script files (Code.gs, etc.) and the manif

WRITE 37 tools

Write clearBasicFilter Clears the basic filter from a Google Spreadsheet sheet. Write fixListFormatting EXPERIMENTAL: Attempts to detect paragraphs that look like lists (e.g., starting with -, , 1.) and convert the Write addComment Adds a comment anchored to a specific text range in the document. NOTE: Due to Google API limitations, comment Write addSpreadsheetSheet Adds a new sheet/tab to an existing Google Spreadsheet. Write appendSpreadsheetRows Appends rows of data to the end of a sheet in a Google Spreadsheet. Write appendToGoogleDoc Appends text to the very end of a specific Google Document or tab. Write applyParagraphStyle Applies paragraph-level formatting (alignment, spacing, named styles like Heading 1) to the paragraph(s) conta Write applyTextStyle Applies character-level formatting (bold, color, font, etc.) to a specific range or found text. Write copyFile Creates a copy of a Google Drive file or document. Write createBoundScript Creates a new Apps Script project bound to a Google Spreadsheet or Document. Returns the script ID for subsequ Write createCalendarEvent Create a new calendar event. Supports timed events, all-day events, and Google Meet integration. Write createDocument Creates a new Google Document. Write createFolder Creates a new folder in Google Drive. Write createFromTemplate Creates a new Google Document from an existing document template. Write createGmailDraft Create a draft email in Gmail. Write createGmailFilter Create a Gmail filter for automatic message processing. Write createGmailLabel Create a new Gmail label. Write createSpreadsheet Creates a new Google Spreadsheet. Write editTableCell Edits the content and/or basic style of a specific table cell. Requires knowing table start index. Write formatMatchingText Finds specific text within a Google Document and applies character formatting (bold, italics, color, etc.) to Write formatSpreadsheetCells Formats cells in a Google Spreadsheet range. Supports background color, text color, font size, bold, italic, a Write insertImageFromUrl Inserts an inline image into a Google Document from a publicly accessible URL. Write insertLocalImage Uploads a local image file to Google Drive and inserts it into a Google Document. The image will be uploaded t Write insertPageBreak Inserts a page break at the specified index. Write insertTable Inserts a new table with the specified dimensions at a given index. Write insertText Inserts text at a specific index within the document body or a specific tab. Write modifyGmailMessageLabels Add or remove labels from a Gmail message. Write moveFile Moves a file or folder to a different location in Google Drive. Write quickAddCalendarEvent Quickly create an event using natural language (e.g., Write renameFile Renames a file or folder in Google Drive. Write replyToComment Adds a reply to an existing comment. Write resolveComment Marks a comment as resolved. NOTE: Due to Google API limitations, the Drive API does not support resolving com Write sendGmailMessage Send an email via Gmail. Supports threading for replies. Write setBasicFilter Sets a basic filter (auto-filter) on a Google Spreadsheet sheet, enabling filter dropdowns on the header row. Write trashGmailMessage Move a Gmail message to Trash. Write updateCalendarEvent Update an existing calendar event. Write writeSpreadsheet Writes data to a specific range in a Google Spreadsheet. Overwrites existing data in the range.

READ 27 tools

Read findElement Finds elements (paragraphs, tables, etc.) based on various criteria. (Not Implemented) Read getCalendarEvent Get a single calendar event by ID. Read getCalendarEvents Get events from a Google Calendar with optional filtering. Read getCalendarFreeBusy Check free/busy information for calendars in a time range. Read getComment Gets a specific comment with its full thread of replies. Read getDocumentInfo Gets detailed information about a specific Google Document. Read getFolderInfo Gets detailed information about a specific folder in Google Drive. Read getGmailAttachment Download an attachment from a Gmail message. Returns base64-encoded data. Read getGmailMessage Get the full content of a Gmail message by ID. Read getGmailMessagesBatch Get multiple Gmail messages in a single request (max 25). Read getGmailThread Get a complete email thread/conversation with all messages. Read getRecentGoogleDocs Gets the most recently modified Google Documents. Read getScriptContent Retrieves the content of an Apps Script project including all files. Read getScriptProjects Lists Apps Script projects. Note: This only works for standalone scripts. For bound scripts, use the parent do Read getSpreadsheetInfo Gets detailed information about a Google Spreadsheet including all sheets/tabs. Read listCalendars List all accessible Google Calendars for the authenticated user. Read listComments Lists all comments in a Google Document. Read listDocumentTabs Lists all tabs in a Google Document, including their hierarchy, IDs, and structure. Read listFolderContents Lists the contents of a specific folder in Google Drive. Read listGmailFilters List all Gmail filters (automatic rules). Read listGmailLabels List all Gmail labels (folders and categories). Read listGoogleDocs Lists Google Documents from your Google Drive with optional filtering. Read listGoogleSheets Lists Google Spreadsheets from your Google Drive with optional filtering. Read readGoogleDoc Reads the content of a specific Google Document, optionally returning structured data. Read readSpreadsheet Reads data from a specific range in a Google Spreadsheet. Read searchGmailMessages Search Gmail messages using query syntax. Supports operators like from:, to:, subject:, has:attachment, is:unr Read searchGoogleDocs Searches for Google Documents by name, content, or other criteria.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Google Workspace MCP Server

Can an AI agent delete data through the Google Workspace MCP Server MCP server? +

Yes. The Google Workspace MCP Server server exposes 7 destructive tools including clearSpreadsheetRange, deleteCalendarEvent, deleteComment. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Google Workspace MCP Server? +

The Google Workspace MCP Server server has 37 write tools including clearBasicFilter, fixListFormatting, addComment. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Google Workspace MCP Server.

How many tools does the Google Workspace MCP Server MCP server expose? +

72 tools across 3 categories: Destructive, Read, Write. 27 are read-only. 45 can modify, create, or delete data.

How do I enforce a policy on Google Workspace MCP Server? +

Register the Google Workspace MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Workspace MCP Server tool call.

Deterministic rules across all 72 Google Workspace MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Free to start. No card required.

72 Google Workspace MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.