// SCAN REPORT

Google Apps Script MCP Server

28 tools. 18 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 1 Jul 2026

18 can modify or destroy data

10 read-only

28 tools total

Community server · catalogue entry verified 01/07/2026

How to control Google Apps Script MCP Server ↓

TOOL MAP

What Google Apps Script MCP Server exposes to your agents

Read (10) Write / Execute (16) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Google Apps Script MCP Server tools

Destructive · High delete_property Script properties in Google Apps Script are configuration data that store application state, secrets, and settings. Execute · High deploy_gas_webapp Deploying a web app executes code in a production environment with externally-facing effects. Execute · High execute_gas_function This tool executes arbitrary Google Apps Script functions, which can perform side effects depending on the function's implementation (read/modify data, send emails, make API calls, etc.). Execute · High clasp_push_and_deploy This tool pushes local code changes to Google Apps Script and optionally deploys them as a web app or other GAS deployment.

18 of Google Apps Script MCP Server's 28 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Google Apps Script MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Apps Script MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_property": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "clasp_clone": {
    "limits": [
      {
        "counter": "clasp_clone_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "audit_properties": {
    "limits": [
      {
        "counter": "audit_properties_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Apps Script MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE APPS SCRIPT →

Instant setup, no code required.

FULL CATALOGUE

All 28 Google Apps Script MCP Server tools

DESTRUCTIVE 1 tools

Destructive delete_property 🗑️ スクリプトプロパティを削除します

EXECUTE 6 tools

Execute clasp_push_and_deploy ローカルの変更をプッシュし、必要に応じてデプロイします（環境切替対応） Execute clasp_setup clasp環境のセットアップ（claspのインストール、ログイン）を行います Execute deploy_gas_webapp Google Apps ScriptをWebアプリとしてデプロイします Execute execute_gas_function Google Apps Script関数を実行します Execute manage_gas_triggers Google Apps Scriptのトリガーを管理します Execute smart_dependency_check Check and resolve runtime dependencies

WRITE 10 tools

Write clasp_clone 既存のGoogle Apps Scriptプロジェクトをクローンします Write clasp_create 新しいGoogle Apps Scriptプロジェクトを作成します Write clasp_pull リモートの変更をローカルプロジェクトに取得します（環境切替対応） Write create_gas_file Google Apps Scriptファイルを作成します Write create_gas_project 新しいGoogle Apps Scriptプロジェクトを作成します Write manage_gas_libraries Google Apps Scriptのライブラリを管理します Write restore_properties 🔄 バックアップからスクリプトプロパティを復元します Write set_secure_property 🔒 スクリプトプロパティに暗号化してデータを安全に保存します Write update_gas_file Google Apps Scriptファイルを更新します Write update_gas_project Google Apps Scriptプロジェクトを更新します

READ 10 tools

Read audit_properties 🔍 スクリプトプロパティのセキュリティ監査を実行します Read backup_properties 💾 スクリプトプロパティをバックアップします Read clasp_list アカウントに紐づくGoogle Apps Scriptプロジェクトの一覧を表示します Read dependency_check Check system dependencies and environment Read get_gas_file Google Apps Scriptファイルの内容を取得します Read get_gas_logs Google Apps Scriptの実行ログを取得します Read get_gas_project Google Apps Scriptプロジェクトの詳細を取得します Read get_secure_property 🔓 スクリプトプロパティから暗号化されたデータを安全に取得します Read list_gas_projects Google Apps Scriptプロジェクトの一覧を取得します Read list_properties 📋 すべてのスクリプトプロパティを一覧表示します

OTHER 1 tools

Other test_tool テスト用ツール

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Google Apps Script MCP Server

Can an AI agent delete data through the Google Apps Script MCP Server MCP server? +

Yes. The Google Apps Script MCP Server server exposes 1 destructive tools including delete_property. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Google Apps Script MCP Server? +

The Google Apps Script MCP Server server has 10 write tools including clasp_clone, clasp_create, clasp_pull. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Google Apps Script MCP Server.

How many tools does the Google Apps Script MCP Server MCP server expose? +

28 tools across 4 categories: Destructive, Execute, Read, Write. 10 are read-only. 18 can modify, create, or delete data.

How do I enforce a policy on Google Apps Script MCP Server? +

Register the Google Apps Script MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Apps Script MCP Server tool call.

Deterministic rules across all 28 Google Apps Script MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE APPS SCRIPT →

Instant setup, no code required.

28 Google Apps Script MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.