Critical-risk tools in Claude MCP x Google Docs
10 of the 84 tools in Claude MCP x Google Docs are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
clearRangeDestructiveClears all cell values in a range without deleting the cells themselves. Formatting is preserved.
-
deleteChartDestructiveDeletes a chart from a Google Spreadsheet by chart ID.
-
deleteConditionalFormattingDestructiveDeletes one or more conditional formatting rules from a sheet by their index. Use getConditionalFormatting to list existing rules and their indices.
-
deleteDraftDestructivePermanently deletes a Gmail draft. This is irreversible — the draft is removed entirely, not moved to Trash. Use when an AI-composed draft was rejected or replaced.
-
deleteEventDestructiveDeletes an event from a Google Calendar. This is permanent — the event is removed, not trashed. Use sendUpdates to email cancellations to attendees.
-
deleteFileDestructiveMoves a file or folder to the trash, or permanently deletes it. Set permanent=true for irreversible deletion.
-
deleteSheetDestructiveDeletes a sheet (tab) from a spreadsheet. Use getSpreadsheetInfo to find the numeric sheet ID.
-
deleteSheetsCommentDestructivePermanently deletes a comment and all its replies from a Google Spreadsheet.
-
deleteTableDestructiveDeletes a table from a spreadsheet. By default, only removes the table object and formatting while keeping the cell data. Optionally clears the data as well.
-
trashMessageDestructiveMoves a Gmail message to Trash. This is the same as clicking Delete in the Gmail UI — reversible from the Trash folder for 30 days. Not a permanent delete.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.