View full policy →

Google Super: 97 unrestricted tools

The Google Super MCP server exposes tools that can move money, delete data, or destroy resources. Without policy enforcement, an autonomous agent has unrestricted access to every one of them.

29 delete data
3 execute code
65 modify data
Write / Execute (68) Destructive / Financial (29)

Destructive tools (GOOGLESUPER_BATCH_DELETE_MESSAGES, GOOGLESUPER_CALENDARS_DELETE, GOOGLESUPER_CLEAR_BASIC_FILTER) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

Write operations (GOOGLESUPER_ACL_PATCH, GOOGLESUPER_ADD_ENRICHMENT, GOOGLESUPER_ADD_FILE_SHARING_PREFERENCE) modify state. Without rate limits, an agent can make hundreds of changes in seconds -- faster than any human can review or revert.

Execute tools (GOOGLESUPER_BATCH_RUN_REPORTS, GOOGLESUPER_EXECUTE_SQL, GOOGLESUPER_PARSE_FILE) trigger processes with side effects. Builds, notifications, workflows -- all fired without throttling.

These Google Super tools can modify, create, or destroy resources. Without a policy, your agent has unrestricted access to all of them.

GOOGLESUPER_ACL_PATCH Updates an access control rule for a calendar using patch semantics (partial update). This allows modifying specific fields without affecting other properties. Note: Each patch request consumes three quota units. For domain-type ACL rules, if PATCH fails with 500 error, this action will automatically fallback to UPDATE method. Write
GOOGLESUPER_ADD_ENRICHMENT Adds an enrichment at a specified position in a defined album. Write
GOOGLESUPER_ADD_FILE_SHARING_PREFERENCE Modifies sharing permissions for an existing Google Drive file, granting a specified role to a user, group, domain, or 'anyone'. Write
GOOGLESUPER_ADD_LABEL_TO_EMAIL Adds and/or removes specified Gmail labels for a message; ensure `message_id` and all `label_ids` are valid (use 'listLabels' for custom label IDs). Write
GOOGLESUPER_ADD_OR_REMOVE_TO_CUSTOMER_LIST AddOrRemoveToCustomerList Tool will add a contact to a customer list in Google Ads. Note: It takes 6 to 12 hours for changes to be reflected in the customer list. Write
GOOGLESUPER_ADD_SHEET Adds a new sheet (worksheet) to a spreadsheet. Use this tool to create a new tab within an existing Google Sheet, optionally specifying its title, index, size, and other properties. IMPORTANT: - Always provide the spreadsheetId. Use 'Search Spreadsheets' action if you need to find it by name - Sheet names must be unique within the spreadsheet - For tab colors, use EITHER rgbColor OR themeColor, never both - Index must be less than or equal to the current number of sheets - CONCURRENCY WARNING: Do not use 'index' when creating multiple sheets in parallel - this causes 'index is too high' errors. For parallel creation, omit the index field and let sheets be added at the end Common use cases: - Add a new sheet with a specific name - Insert a sheet at a specific position - Create a sheet with custom colors and formatting Write
GOOGLESUPER_APPEND_DIMENSION Tool to append new rows or columns to a sheet, increasing its size. Use when you need to add empty rows or columns to an existing sheet. Write
GOOGLESUPER_BATCH_ADD_MEDIA_ITEMS Adds one or more media items to an album in Google Photos. Write
GOOGLESUPER_BATCH_CREATE_MEDIA_ITEMS Unified action to upload media files and create them as items in Google Photos. Write
GOOGLESUPER_BATCH_MODIFY_MESSAGES Modify labels on multiple Gmail messages in one efficient API call. Supports up to 1,000 messages per request for bulk operations like archiving, marking as read/unread, or applying custom labels. Write
GOOGLESUPER_BATCH_UPDATE Updates a specified range in a Google Sheet with given values, or appends them as new rows if `first_cell_location` is omitted. Auto-expands grid for large datasets, preventing range errors. Requirements: Target sheet must exist and spreadsheet must contain at least one worksheet. Write
GOOGLESUPER_BATCH_UPDATE_VALUES_BY_DATA_FILTER Tool to update values in ranges matching data filters. Use when you need to update specific data in a Google Sheet based on criteria rather than fixed cell ranges. Write
GOOGLESUPER_CALENDARS_UPDATE Updates metadata for a calendar. Write
GOOGLESUPER_COPY_DOCUMENT Tool to create a copy of an existing Google Document. Use this to duplicate a document, for example, when using an existing document as a template. The copied document will have a default title (e.g., 'Copy of [original title]') if no new title is provided, and will be placed in the user's root Google Drive folder. Write
GOOGLESUPER_COPY_FILE Duplicates an existing file in Google Drive, identified by its `file_id`. Write
GOOGLESUPER_CREATE_ALBUM Creates a new album in Google Photos. Write
GOOGLESUPER_CREATE_AUDIENCE_EXPORT Tool to create an audience export. Use after configuring the audience and dimensions to produce a long-running Operation. Write
GOOGLESUPER_CREATE_AUDIENCE_LIST Tool to create an audience list. Use when you need to define and asynchronously populate a new AudienceList resource under a GA4 property. Write
GOOGLESUPER_CREATE_CHART Create a chart in a Google Sheets spreadsheet using the specified data range and chart type. Conditional requirements: - Provide either a simple chart via chart_type + data_range (basicChart), OR supply a full chart_spec supporting all chart types. Exactly one approach should be used. - When using chart_spec, set exactly one of the union fields (basicChart | pieChart | bubbleChart | candlestickChart | histogramChart | waterfallChart | treemapChart | orgChart | scorecardChart). Write
GOOGLESUPER_CREATE_COMMENT Tool to create a comment on a file. Use when you need to add a new comment to a specific file in Google Drive. Write
GOOGLESUPER_CREATE_CUSTOMER_LIST CreateCustomerList Tool will create a customer list in Google Ads. Write
GOOGLESUPER_CREATE_DOCUMENT Creates a new Google Docs document using the provided title as filename and inserts the initial text at the beginning if non-empty, returning the document's ID and metadata (excluding body content). Write
GOOGLESUPER_CREATE_DOCUMENT_MARKDOWN Creates a new Google Docs document, optionally initializing it with a title and content provided as Markdown text. Write
GOOGLESUPER_CREATE_DRIVE Tool to create a new shared drive. Use when you need to programmatically create a new shared drive for collaboration or storage. Write
GOOGLESUPER_CREATE_EMAIL_DRAFT Creates a Gmail email draft, requiring at least one of recipient_email, cc, or bcc must be provided. Atleast one of subject or body must be provided. Supports To/Cc/Bcc, subject, plain/HTML body (ensure `is_html=True` for HTML), attachments, and threading. When creating a draft reply to an existing thread (thread_id provided), leave subject empty to stay in the same thread; setting a subject will create a NEW thread instead. Write
GOOGLESUPER_CREATE_EVENT Create a Google Calendar event using `start_datetime` plus `event_duration_hour` and `event_duration_minutes` fields to derive the end time. Requires calendar write access. The organizer is added as an attendee unless `exclude_organizer` is True. Example request to create event for 1 hour 30 minutes: { "calendar_id": "primary", "start_datetime": "2025-01-16T13:00:00", "timezone": "America/New_York", "event_duration_hour": 1, "event_duration_minutes": 30, "summary": "Client sync", "attendees": [{"email": "guest@example.com"}] } Write
GOOGLESUPER_CREATE_EXPANDED_DATA_SET Tool to create an expanded data set for a property. Use when you need to combine specific dimensions and metrics into a custom dataset after property creation. Write
GOOGLESUPER_CREATE_FILE Creates a new file or folder with metadata. Use to create empty files or folders, or files with content by providing it in the request body (though this action primarily focuses on metadata creation). Write
GOOGLESUPER_CREATE_FILE_FROM_TEXT Creates a new file in Google Drive from provided text content (up to 10MB), supporting various formats including automatic conversion to Google Workspace types. Write
GOOGLESUPER_CREATE_FOLDER Creates a new folder in Google Drive, optionally within a parent folder specified by its ID or name; if a parent name is provided but not found, the action will fail. Write
GOOGLESUPER_CREATE_FOOTER Tool to create a new footer in a Google Document. Use when you need to add a footer, optionally specifying its type and the section it applies to. Write
GOOGLESUPER_CREATE_FOOTNOTE Tool to create a new footnote in a Google Document. Use this when you need to add a footnote at a specific location or at the end of the document body. Write
GOOGLESUPER_CREATE_GOOGLE_SHEET1 Creates a new Google Spreadsheet in Google Drive using the provided title. Write
GOOGLESUPER_CREATE_HEADER Tool to create a new header in a Google Document. Use this tool when you need to add a header to a document, optionally specifying the section it applies to. Write
GOOGLESUPER_CREATE_LABEL Creates a new label with a unique name in the specified user's Gmail account. Write
GOOGLESUPER_CREATE_MEET Creates a new Google Meet space, optionally configuring its access type and entry point access controls. Write
GOOGLESUPER_CREATE_NAMED_RANGE Tool to create a new named range in a Google Document. Use this to assign a name to a specific part of the document for easier reference or programmatic manipulation. Write
GOOGLESUPER_CREATE_PARAGRAPH_BULLETS Tool to add bullets to paragraphs within a specified range in a Google Document. Use when you need to format a list or a set of paragraphs as bullet points. Write
GOOGLESUPER_CREATE_REPLY Tool to create a reply to a comment in Google Drive. Use when you need to respond to an existing comment on a file. Write
GOOGLESUPER_CREATE_ROLLUP_PROPERTY Tool to create a GA4 Roll-up Property and optionally initial source links. Write
GOOGLESUPER_CREATE_SHORTCUT_TO_FILE Tool to create a shortcut to a file or folder in Google Drive. Use when you need to link to an existing Drive item from another location without duplicating it. Write
GOOGLESUPER_CREATE_SPREADSHEET_COLUMN Creates a new column in a Google Spreadsheet, requiring a valid `spreadsheet_id` and an existing `sheet_id`; an out-of-bounds `insert_index` may append/prepend the column. Write
GOOGLESUPER_CREATE_SPREADSHEET_ROW Inserts a new, empty row into a specified sheet of a Google Spreadsheet at a given index, optionally inheriting formatting from the row above. Write
GOOGLESUPER_CREATE_TASK_LIST Creates a new task list with the specified title. Write
GOOGLESUPER_EDIT_FILE Updates an existing Google Drive file by overwriting its entire content with new text (max 10MB). This action allows users to change the content of a Drive file, ensuring that the latest updates are saved and available without creating a new file. Users can specify different MIME types for the content being uploaded, facilitating various file formats. Write
GOOGLESUPER_EVENTS_MOVE Moves an event to another calendar, i.e., changes an event's organizer. Write
GOOGLESUPER_FILES_MODIFY_LABELS Modifies the set of labels applied to a file. Returns a list of the labels that were added or modified. Use when you need to programmatically change labels on a Google Drive file, such as adding, updating, or removing them. Write
GOOGLESUPER_GENERATE_IDS Generates a set of file IDs which can be provided in create or copy requests. Use when you need to pre-allocate IDs for new files or copies. Write
GOOGLESUPER_INSERT_DIMENSION Tool to insert new rows or columns into a sheet at a specified location. Use when you need to add empty rows or columns within an existing Google Sheet. Write
GOOGLESUPER_INSERT_INLINE_IMAGE Tool to insert an image from a given URI at a specified location in a Google Document as an inline image. Use when you need to add an image to a document programmatically. Write
GOOGLESUPER_INSERT_PAGE_BREAK Tool to insert a page break into a Google Document. Use when you need to start new content on a fresh page, such as at the end of a chapter or section. Write
GOOGLESUPER_INSERT_TABLE_ACTION Tool to insert a table into a Google Document. Use when you need to add a new table at a specific location or at the end of a segment (like document body, header, or footer) in a document. Write
GOOGLESUPER_INSERT_TABLE_COLUMN Tool to insert a new column into a table in a Google Document. Use this tool when you need to add a column to an existing table at a specific location. Write
GOOGLESUPER_INSERT_TASK Creates a new task in a given `tasklist_id`, optionally as a subtask of an existing `task_parent` or positioned after an existing `task_previous` sibling, where both `task_parent` and `task_previous` must belong to the same `tasklist_id` if specified. IMPORTANT: Date fields (due, completed) accept various formats like '28 Sep 2025', '11:59 PM, 22 Sep 2025', or ISO format '2025-09-21T15:30:00Z' and will automatically convert them to RFC3339 format required by the API. Write
GOOGLESUPER_INSERT_TEXT_ACTION Tool to insert a string of text at a specified location within a Google Document. Use when you need to add new text content to an existing document. Write
GOOGLESUPER_MODIFY_THREAD_LABELS Adds or removes specified existing label IDs from a Gmail thread, affecting all its messages; ensure the thread ID is valid. Write
GOOGLESUPER_MOVE_FILE Tool to move a file from one folder to another in Google Drive. Use when you need to reorganize files by changing their parent folder(s). Write
GOOGLESUPER_MOVE_TASK Moves the specified task to another position in the destination task list. Write
GOOGLESUPER_MOVE_TO_TRASH Moves an existing, non-deleted email message to the trash for the specified user. Write
GOOGLESUPER_PATCH_CALENDAR Partially updates (PATCHes) an existing Google Calendar, modifying only the fields provided; `summary` is mandatory and cannot be an empty string, and an empty string for `description` or `location` clears them. Write
GOOGLESUPER_PATCH_EVENT Update specified fields of an existing event in a Google Calendar using patch semantics (array fields like `attendees` are fully replaced if provided); ensure the `calendar_id` and `event_id` are valid and the user has write access to the calendar. Write
GOOGLESUPER_PATCH_LABEL Patches the specified label. Write
GOOGLESUPER_PATCH_TASK Partially updates an existing task (identified by `task_id`) within a specific Google Task list (identified by `tasklist_id`), modifying only the provided attributes from `TaskInput` (e.g., `title`, `notes`, `due` date, `status`) and requiring both the task and list to exist. Write
GOOGLESUPER_PATCH_TASK_LIST Updates the title of an existing Google Tasks task list. Write
GOOGLESUPER_QUICK_ADD Parses natural language text to quickly create a basic Google Calendar event with its title, date, and time, suitable for simple scheduling; does not support direct attendee addition or recurring events, and `calendar_id` must be valid if not 'primary'. Write
GOOGLESUPER_BATCH_DELETE_MESSAGES Tool to permanently delete multiple Gmail messages in bulk. Use when you need to efficiently remove large numbers of emails (e.g., retention enforcement, mailbox hygiene). Destructive
GOOGLESUPER_CALENDARS_DELETE Deletes a secondary calendar. Use calendars.clear for clearing all events on primary calendars. Destructive
GOOGLESUPER_CLEAR_BASIC_FILTER Tool to clear the basic filter from a sheet. Use when you need to remove an existing basic filter from a specific sheet within a Google Spreadsheet. Destructive
GOOGLESUPER_CLEAR_CALENDAR Clears a primary calendar. This operation deletes all events associated with the primary calendar of an account. Destructive
GOOGLESUPER_CLEAR_TASKS Permanently clears all completed tasks from a specified Google Tasks list; this action is destructive and idempotent. Destructive
GOOGLESUPER_CLEAR_VALUES Clears cell content (preserving formatting and notes) from a specified A1 notation range in a Google Spreadsheet; the range must correspond to an existing sheet and cells. Destructive
GOOGLESUPER_DELETE_COMMENT Deletes a comment from a file. Use when you need to remove a specific comment from a Google Drive file. Destructive
GOOGLESUPER_DELETE_CONTENT_RANGE Tool to delete a range of content from a Google Document. Use when you need to remove a specific portion of text or other structural elements within a document. Destructive
GOOGLESUPER_DELETE_DIMENSION Tool to delete specified rows or columns from a sheet in a Google Spreadsheet. Use when you need to remove a range of rows or columns. Destructive
GOOGLESUPER_DELETE_DRAFT Permanently deletes a specific Gmail draft using its ID; ensure the draft exists and the user has necessary permissions for the given `user_id`. Destructive
GOOGLESUPER_DELETE_DRIVE Tool to permanently delete a shared drive. Use when you need to remove a shared drive and its contents (if specified). Destructive
GOOGLESUPER_DELETE_EVENT Deletes a specified event by `event_id` from a Google Calendar (`calendar_id`); this action is idempotent and raises a 404 error if the event is not found. Destructive
GOOGLESUPER_DELETE_FOOTER Tool to delete a footer from a Google Document. Use when you need to remove a footer from a specific section or the default footer. Destructive
GOOGLESUPER_DELETE_HEADER Deletes the header from the specified section or the default header if no section is specified. Use this tool to remove a header from a Google Document. Destructive
GOOGLESUPER_DELETE_MESSAGE Permanently deletes a specific email message by its ID from a Gmail mailbox; for `user_id`, use 'me' for the authenticated user or an email address to which the authenticated user has delegated access. Destructive
GOOGLESUPER_DELETE_NAMED_RANGE Tool to delete a named range from a Google Document. Use when you need to remove a previously defined named range by its ID or name. Destructive
GOOGLESUPER_DELETE_PARAGRAPH_BULLETS Tool to remove bullets from paragraphs within a specified range in a Google Document. Use when you need to clear bullet formatting from a section of a document. Destructive
GOOGLESUPER_DELETE_PERMISSION Deletes a permission from a file by permission ID. Use when you need to revoke access for a specific user or group from a file. Destructive
GOOGLESUPER_DELETE_REPLY Tool to delete a specific reply by reply ID. Use when you need to remove a reply from a comment on a file. Destructive
GOOGLESUPER_DELETE_SHEET Tool to delete a sheet (worksheet) from a spreadsheet. Use when you need to remove a specific sheet from a Google Sheet document. Destructive
GOOGLESUPER_DELETE_TABLE Tool to delete an entire table from a Google Document. Use when you have the document ID and the specific start and end index of the table element to be removed. The table's range can be found by inspecting the document's content structure. Destructive
GOOGLESUPER_DELETE_TABLE_COLUMN Tool to delete a column from a table in a Google Document. Use this tool when you need to remove a specific column from an existing table within a document. Destructive
GOOGLESUPER_DELETE_TABLE_ROW Tool to delete a row from a table in a Google Document. Use when you need to remove a specific row from an existing table. Destructive
GOOGLESUPER_DELETE_TASK Deletes a specified task from a given task list in Google Tasks. Destructive
GOOGLESUPER_DELETE_TASK_LIST Permanently deletes an existing Google Task list, identified by `tasklist_id`, along with all its tasks; this operation is irreversible. Destructive
GOOGLESUPER_EMPTY_TRASH Tool to permanently delete all of the user's trashed files. Use when you want to empty the trash in Google Drive. This action allows you to permanently remove all files that are currently in the trash of Google Drive. It can be applied to files in both the user's root trash and shared drives, ensuring a complete removal of unwanted files. Destructive
GOOGLESUPER_GOOGLE_DRIVE_DELETE_FOLDER_OR_FILE_ACTION Tool to delete a file or folder in Google Drive. Use when you need to permanently remove a specific file or folder using its ID. Note: This action is irreversible. Destructive
GOOGLESUPER_HIDE_DRIVE Tool to hide a shared drive from the default view. Use when you want to remove a shared drive from the user's main Google Drive interface without deleting it. Destructive
GOOGLESUPER_REMOVE_ATTENDEE Removes an attendee from a specified event in a Google Calendar; the calendar and event must exist. Destructive
GOOGLESUPER_BATCH_RUN_REPORTS Tool to return multiple analytics data reports in a batch. Use when you need to fetch multiple reports for one GA4 property in a single request. Execute
GOOGLESUPER_EXECUTE_SQL Execute SQL queries against Google Sheets tables. Supports SELECT, INSERT, UPDATE, and DELETE operations with familiar SQL syntax. Tables are automatically detected and mapped from the spreadsheet structure. Execute
GOOGLESUPER_PARSE_FILE DEPRECATED: Exports Google Workspace files (max 10MB) to a specified format using `mime_type`, or downloads other file types; use `GOOGLEDRIVE_DOWNLOAD_FILE` instead. Execute

These rules are based on the tool categories exposed by the Google Super MCP server. Adjust the limits to match your use case.

Deny destructive operations
GOOGLESUPER_BATCH_DELETE_MESSAGES:
    rules:
      - action: deny
        on_deny: "Destructive operations blocked by policy"

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
GOOGLESUPER_ACL_PATCH:
    rules:
      - name: "write-rate-limit"
        rate_limit: 30/hour
        on_deny: "Write rate limit reached"

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
GOOGLESUPER_AGGREGATE_COLUMN_DATA:
    rules:
      - action: allow
        rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

This is the complete policy file for Google Super. It lists every tool with suggested default rules. Download it, adjust the limits, and run with Intercept.

googlesuper.yaml
version: "1"
default: "deny"

tools:
  GOOGLESUPER_BATCH_DELETE_MESSAGES:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_CALENDARS_DELETE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_CLEAR_BASIC_FILTER:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_CLEAR_CALENDAR:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_CLEAR_TASKS:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_CLEAR_VALUES:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_COMMENT:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_CONTENT_RANGE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_DIMENSION:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_DRAFT:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_DRIVE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_EVENT:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_FOOTER:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_HEADER:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_MESSAGE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_NAMED_RANGE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_PARAGRAPH_BULLETS:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_PERMISSION:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_REPLY:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_SHEET:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_TABLE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_TABLE_COLUMN:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_TABLE_ROW:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_TASK:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_DELETE_TASK_LIST:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_EMPTY_TRASH:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_GOOGLE_DRIVE_DELETE_FOLDER_OR_FILE_ACTION:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_HIDE_DRIVE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_REMOVE_ATTENDEE:
    rules:
      - action: deny
        on_deny: "Destructive operation blocked by policy"
  GOOGLESUPER_BATCH_RUN_REPORTS:
    rules:
      - action: allow
        rate_limit: 10/hour
        validate:
          required_args: true
  GOOGLESUPER_EXECUTE_SQL:
    rules:
      - action: allow
        rate_limit: 10/hour
        validate:
          required_args: true
  GOOGLESUPER_PARSE_FILE:
    rules:
      - action: allow
        rate_limit: 10/hour
        validate:
          required_args: true
  GOOGLESUPER_AGGREGATE_COLUMN_DATA:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_BATCH_GET:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_BATCH_GET_MEDIA_ITEMS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_CALENDAR_LIST_INSERT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_CALENDAR_LIST_UPDATE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_CHECK_COMPATIBILITY:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_COMPUTE_ROUTE_MATRIX:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_DISTANCE_MATRIX_API:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_DOWNLOAD_FILE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_DUPLICATE_CALENDAR:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_EVENTS_INSTANCES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_EVENTS_LIST:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_EVENTS_WATCH:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FETCH_EMAILS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FETCH_MESSAGE_BY_MESSAGE_ID:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FETCH_MESSAGE_BY_THREAD_ID:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FIND_EVENT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FIND_FILE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FIND_FOLDER:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FIND_FREE_SLOTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FIND_REPLACE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FIND_WORKSHEET_BY_TITLE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FORMAT_CELL:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FORWARD_MESSAGE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_FREE_BUSY_QUERY:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GEOCODING_API:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_ABOUT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_ACCOUNT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_ALBUM:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_ATTACHMENT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_AUDIENCE_EXPORT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_AUDIENCE_LIST:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CALENDAR:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CAMPAIGN_BY_ID:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CAMPAIGN_BY_NAME:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CHANGES_START_PAGE_TOKEN:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CHARTS_FROM_SPREADSHEET:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_COMMENT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CONFERENCE_RECORD_FOR_MEET:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CONTACTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CURRENT_DATE_TIME:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_CUSTOMER_LISTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_DIRECTION:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_DOCUMENT_BY_ID:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_DRIVE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_FILE_METADATA:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_KEY_EVENT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_MEDIA_ITEM_DOWNLOAD:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_MEET:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_METADATA:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_PARTICIPANT_SESSION:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_PEOPLE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_PERMISSION:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_PROFILE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_PROPERTY_QUOTAS_SNAPSHOT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_RECORDINGS_BY_CONFERENCE_RECORD_ID:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_REPLY:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_REVISION:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_ROUTE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_SHEET_NAMES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_SPREADSHEET_BY_DATA_FILTER:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_SPREADSHEET_INFO:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_TABLE_SCHEMA:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_TASK:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_TASK_LIST:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_GET_TRANSCRIPTS_BY_CONFERENCE_RECORD_ID:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_ACCOUNTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_ACL_RULES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_ALBUMS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_AUDIENCE_EXPORTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_AUDIENCE_LISTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_AUDIENCES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_CALENDARS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_CHANGES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_COMMENTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_CONFERENCE_RECORDS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_DRAFTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_FILE_LABELS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_FILES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_HISTORY:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_KEY_EVENTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_LABELS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_MEDIA_ITEMS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_PARTICIPANT_SESSIONS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_PERMISSIONS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_PROPERTIES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_REPLIES_TO_COMMENT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_REPORTING_DATA_ANNOTATIONS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_REVISIONS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_ROLLUP_PROPERTIES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_SEARCH_ADS360_LINKS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_SHARED_DRIVES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_SPREADSHEET_CHARTS_ACTION:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_TABLES:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_TASK_LISTS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_TASKS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LIST_THREADS:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_LOOKUP_SPREADSHEET_ROW:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_MAPS_EMBED_API:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_NEARBY_SEARCH:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_QUERY_AUDIENCE_EXPORT:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_QUERY_AUDIENCE_LIST:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_QUERY_TABLE:
    rules:
      - action: allow
        rate_limit: 60/minute
  GOOGLESUPER_ACL_PATCH:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_ADD_ENRICHMENT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_ADD_FILE_SHARING_PREFERENCE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_ADD_LABEL_TO_EMAIL:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_ADD_OR_REMOVE_TO_CUSTOMER_LIST:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_ADD_SHEET:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_APPEND_DIMENSION:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_BATCH_ADD_MEDIA_ITEMS:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_BATCH_CREATE_MEDIA_ITEMS:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_BATCH_MODIFY_MESSAGES:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_BATCH_UPDATE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_BATCH_UPDATE_VALUES_BY_DATA_FILTER:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CALENDARS_UPDATE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_COPY_DOCUMENT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_COPY_FILE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_ALBUM:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_AUDIENCE_EXPORT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_AUDIENCE_LIST:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_CHART:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_COMMENT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_CUSTOMER_LIST:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_DOCUMENT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_DOCUMENT_MARKDOWN:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_DRIVE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_EMAIL_DRAFT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_EVENT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_EXPANDED_DATA_SET:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_FILE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_FILE_FROM_TEXT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_FOLDER:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_FOOTER:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_FOOTNOTE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_GOOGLE_SHEET1:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_HEADER:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_LABEL:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_MEET:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_NAMED_RANGE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_PARAGRAPH_BULLETS:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_REPLY:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_ROLLUP_PROPERTY:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_SHORTCUT_TO_FILE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_SPREADSHEET_COLUMN:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_SPREADSHEET_ROW:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_CREATE_TASK_LIST:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_EDIT_FILE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_EVENTS_MOVE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_FILES_MODIFY_LABELS:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_GENERATE_IDS:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_DIMENSION:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_INLINE_IMAGE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_PAGE_BREAK:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_TABLE_ACTION:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_TABLE_COLUMN:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_TASK:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_INSERT_TEXT_ACTION:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_MODIFY_THREAD_LABELS:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_MOVE_FILE:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_MOVE_TASK:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_MOVE_TO_TRASH:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_PATCH_CALENDAR:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_PATCH_EVENT:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_PATCH_LABEL:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_PATCH_TASK:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_PATCH_TASK_LIST:
    rules:
      - action: allow
        rate_limit: 30/hour
  GOOGLESUPER_QUICK_ADD:
    rules:
      - action: allow
        rate_limit: 30/hour

Two commands. Under two minutes.

01

Download the policy

curl -o googlesuper.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/googlesuper.yaml
02

Run Intercept in front of the server

intercept -c googlesuper.yaml -- npx -y @googlesuper

Works with any MCP client:

Every tool call is now checked against your policy before it reaches Google Super. Denied calls are blocked and logged. Allowed calls pass through with no latency impact.

Enforce policies on Google Super

Open source. One binary. Zero dependencies.

npx -y @policylayer/intercept
github.com/policylayer/intercept →
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.