Critical-risk tools in Google Workspace MCP Server

Critical severity Google Workspace MCP Server MCP Server 14 of 128 tools

14 of the 128 tools in Google Workspace MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

clearExcelRange Destructive

Clears values from a range in an Excel-format file (.xlsx or .xls) on Google Drive. Similar to clearSpreadsheetRange but preserves Excel format.
clearSpreadsheetRange Destructive

Clears all values from a specific range in a Google Spreadsheet.
deleteCalendarEvent Destructive

Delete a calendar event.
deleteComment Destructive

Deletes a comment from the document.
deleteExcelSheet Destructive

Deletes a sheet/tab from an Excel-format file (.xlsx or .xls) on Google Drive. Cannot delete the last sheet.
deleteFile Destructive

Moves a file or folder to trash in Google Drive. Files can be restored from trash within 30 days.
deleteGmailDraft Destructive

Permanently delete a Gmail draft. This action cannot be undone.
deleteGmailFilter Destructive

Delete a Gmail filter by its ID.
deleteGmailMessage Destructive

Move a Gmail message to trash. Messages in trash are automatically deleted after 30 days.
deletePeopleContactGroup Destructive

Delete a contact group. Contacts in the group are not deleted.
deletePeopleContactPhoto Destructive

Remove a contact
deleteRange Destructive

Deletes content within a specified range (start index inclusive, end index exclusive) from the document or a specific tab.
deleteSpreadsheetSheet Destructive

Deletes a sheet/tab from an existing Google Spreadsheet. Cannot delete the last sheet.
removeAccount Destructive

Removes a Google account from the MCP server. This deletes the stored credentials for the account.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Google Workspace MCP Server

Tools at critical risk

Attacks that target this class

More on Google Workspace MCP Server

Enforce policy on every Google Workspace MCP Server tool call.