// SCAN REPORT

Smartsheet MCP Server

117 tools. 59 can modify or destroy data without limits.

11 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

59 can modify or destroy data

58 read-only

117 tools total

Community server · catalogue entry verified 04/07/2026

How to control Smartsheet MCP Server ↓

TOOL MAP

What Smartsheet MCP Server exposes to your agents

Read (58) Write / Execute (48) Destructive / Financial (11)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Smartsheet MCP Server tools

Destructive · High bulk_delete_rows This tool permanently removes data from Smartsheet sheets without ability to undo. Destructive · High delete_attachment Deletion operations that cannot be easily undone are classified as Destructive rather than Write. Destructive · High delete_column Deletion of a column is an irreversible operation that cannot be undone through normal means—it permanently removes the column definition and all data within it from the sheet. Destructive · High delete_group Deletion is an irreversible operation that cannot be undone.

59 of Smartsheet MCP Server's 117 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Smartsheet MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Smartsheet MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "bulk_delete_rows": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_column": {
    "limits": [
      {
        "counter": "add_column_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "export_sheet_to_csv": {
    "limits": [
      {
        "counter": "export_sheet_to_csv_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Smartsheet MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SMARTSHEET →

Instant setup, no code required.

FULL CATALOGUE

All 117 Smartsheet MCP Server tools

DESTRUCTIVE 11 tools

Destructive bulk_delete_rows Deletes multiple rows from a sheet Destructive delete_attachment Deletes an attachment from a sheet Destructive delete_column Deletes a column from a sheet Destructive delete_group Deletes a group Destructive delete_rows Deletes rows from a sheet Destructive delete_sheet_share Removes sharing access from a sheet Destructive delete_summary_fields Deletes summary fields from a sheet Destructive delete_webhook Deletes a webhook Destructive remove_cell_link Removes a cell link from a cell Destructive remove_favorites Removes items from favorites Destructive remove_group_member Removes a member from a group

WRITE 48 tools

Write add_column Adds a new column to a sheet Write add_dashboard_to_favorites Adds a dashboard (sight) to favorites Write add_favorites Adds items to favorites Write add_folder_to_favorites Adds a folder to favorites Write add_group_members Adds members to a group Write add_report_to_favorites Adds a report to favorites Write add_rows Adds new rows to a sheet Write add_sheet_to_favorites Adds a sheet to favorites Write add_summary_fields Adds new summary fields to a sheet Write add_workspace_to_favorites Adds a workspace to favorites Write attach_url_to_row Attaches a URL (link, Google Drive, Dropbox, etc.) to a specific row Write attach_url_to_sheet Attaches a URL (link, Google Drive, Dropbox, etc.) to a sheet Write bulk_add_rows Adds multiple rows to a sheet in a single operation Write bulk_update_rows Updates multiple rows in a sheet in a single operation Write copy_rows Copies rows from one sheet to another Write copy_sheet Creates a copy of the specified sheet in the same folder Write create_cell_link Creates a cell link that syncs a cell Write create_cross_sheet_reference Creates a cross-sheet reference to use in formulas like VLOOKUP, INDEX, etc. Write create_folder Creates a new folder in a folder Write create_group Creates a new group Write create_row_discussion Creates a new discussion on a row Write create_sheet Creates a new sheet Write create_sheet_discussion Creates a new discussion on a sheet Write create_sheet_from_template Creates a new sheet from a template Write create_sheet_in_folder_from_template Creates a new sheet in a folder from a template Write create_sheet_in_workspace_from_template Creates a new sheet in a workspace from a template Write create_update_request Creates an update request for a sheet Write create_webhook Creates a new webhook to receive notifications when a sheet changes Write create_workspace Creates a new workspace Write create_workspace_folder Creates a new folder in a workspace Write import_csv_to_existing_sheet Imports CSV content as new rows in an existing sheet Write import_csv_to_new_sheet Imports CSV content into a new sheet Write move_rows Moves rows from one sheet to another Write move_sheet Moves a sheet to a different folder or workspace Write remove_sheet_from_favorites Removes a sheet from favorites Write reset_webhook_secret Resets the shared secret for a webhook Write send_report Sends a report via email to specified recipients Write share_folder Shares a folder with users or groups Write share_report Shares a report with users or groups Write share_sheet Shares a sheet with users or groups Write share_workspace Shares a workspace with users or groups Write sort_rows Sorts rows in a sheet by one or more columns Write update_column Updates an existing column Write update_group Updates an existing group Write update_rows Updates rows in a sheet, including cell values, formatting, and formulae Write update_sheet_share Updates the access level of an existing share Write update_summary_fields Updates existing summary fields Write update_webhook Updates an existing webhook (enable/disable or change callback URL)

READ 58 tools

Read export_sheet_to_csv Exports a sheet to CSV format Read export_sheet_to_excel Exports a sheet to Excel format (returns base64 encoded content) Read export_sheet_to_pdf Exports a sheet to PDF format (returns base64 encoded content) Read get_all_events Gets all events by paginating through the stream (may take time for large result sets) Read get_attachment Gets attachment metadata including download URL Read get_cell_history Retrieves the history of changes for a specific cell Read get_cell_links Gets all cell links information for a sheet Read get_column Gets a specific column by ID Read get_columns Gets all columns for a sheet Read get_cross_sheet_reference Gets a specific cross-sheet reference Read get_current_user Gets the current user Read get_discussions_by_row_id Gets discussions by row ID Read get_discussions_by_sheet_id Gets discussions by sheet ID Read get_events Gets events from the audit log (requires admin privileges) Read get_events_by_action Gets events filtered by action type Read get_events_by_object_type Gets events filtered by object type Read get_events_since Gets events since a specific timestamp Read get_folder Retrieves the current state of a folder, including its contents which can be sheets, reports, or other folders Read get_group Gets details of a specific group Read get_group_members Gets all members of a group Read get_recent_events Gets events from the last 24 hours Read get_report Retrieves a report by ID with its data rows Read get_report_publish_status Gets the publish status of a report Read get_row Retrieves a specific row from a sheet Read get_sheet Retrieves the current state of a sheet, including rows, columns, and cells Read get_sheet_as_json Gets a sheet in JSON format with optional filtering and pagination Read get_sheet_by_url Retrieves the current state of a sheet, including rows, columns, and cells Read get_sheet_location Gets the folder ID where a sheet is located Read get_sheet_version Gets the current version number of a sheet Read get_summary_field Gets a specific summary field by ID Read get_summary_fields Gets all summary fields for a sheet (the sheet summary section) Read get_user Gets a user Read get_webhook Gets details of a specific webhook Read get_workspace Retrieves the current state of a Workspace, including its contents which can be sheets, reports, or other fold Read get_workspaces Retrieves my Workspaces Read list_cross_sheet_references Lists all cross-sheet references defined for a sheet Read list_favorites Lists all favorites for the current user Read list_folder_shares Lists all shares for a folder Read list_groups Lists all groups in the organization Read list_public_templates Lists all publicly available Smartsheet templates Read list_report_shares Lists all shares for a report Read list_reports Lists all reports accessible to the current user Read list_row_attachments Lists all attachments on a specific row Read list_sheet_attachments Lists all attachments on a sheet Read list_sheet_shares Lists all shares (users/groups with access) for a sheet Read list_user_templates Lists templates created by the user Read list_users Lists all users Read list_webhooks Lists all webhooks for the authenticated user Read list_workspace_shares Lists all shares for a workspace Read search_dashboards Search for dashboards by name Read search_folders Search for folders by name Read search_in_sheet Search cell data and summary fields for a specific sheet Read search_in_sheet_by_url Search cell data and summary fields for a specific sheet by URL Read search_reports Search for reports by name Read search_sheets Search for sheets by name, cell data, or summary fields Read search_workspaces Search for workspaces by name Read what_am_i_assigned_to_by_sheet_id Search a sheet by ID to find assigned tasks Read what_am_i_assigned_to_by_sheet_url Search a sheet by URL to find assigned tasks

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Smartsheet MCP Server

Can an AI agent delete data through the Smartsheet MCP Server MCP server? +

Yes. The Smartsheet MCP Server server exposes 11 destructive tools including bulk_delete_rows, delete_attachment, delete_column. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Smartsheet MCP Server? +

The Smartsheet MCP Server server has 48 write tools including add_column, add_dashboard_to_favorites, add_favorites. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Smartsheet MCP Server.

How many tools does the Smartsheet MCP Server MCP server expose? +

117 tools across 3 categories: Destructive, Read, Write. 58 are read-only. 59 can modify, create, or delete data.

How do I enforce a policy on Smartsheet MCP Server? +

Register the Smartsheet MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Smartsheet MCP Server tool call.

Deterministic rules across all 117 Smartsheet MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SMARTSHEET →

Instant setup, no code required.

117 Smartsheet MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.