Atlas / MCP servers / claude-book / claude-book-google-forms

claude-book-google-formsBLOCK

mcp/claude-book/mcp-server-google-forms

Servidor MCP local para criar, editar e publicar Google Forms a partir do Claude Code — código de exemplo do livro sobre Claude Code

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
—
Transport
stdio
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/mcp-server-google-forms) [](https://registry.modelcontextprotocol.io/?q=mcp-server-google-forms) [](https://doi.org/10.5281/zenodo.21296975)

Servidor MCP local que permite ao Claude Code criar, editar e publicar Google Forms — apresentado aos usuários como "Forms IA (MCP)", um app verificado pelo Google. Código de exemplo do livro sobre Claude Code.

✅ Ficou fácil: você não precisa criar nada no Google Cloud nem baixar arquivos de credenciais. É instalar, entrar com a sua conta Google (tela limpa, sem avisos) e usar. Há também uma versão em página, com cards — talvez mais confortável de ler.

Índice

  • Início rápido
  • Guia completo para quem não programa
  • Ferramentas (15)
  • Solução de problemas
  • Usar o próprio projeto do Google Cloud (avançado)
  • Referência técnica
  • Documentação
  • Citação · Licença

Início rápido

Tem Node.js 18+, o Claude Code e uma conta Google? Então são dois comandos:

# 1. Autorize com o Google (o navegador abre; app verificado, sem avisos)
npx -p mcp-server-google-forms mcp-server-google-forms-token

# 2. Registre no Claude Code
claude mcp add google-forms -- npx mcp-server-google-forms

Quer o passo a passo detalhado, escrito para quem não programa? Siga o guia abaixo. 👇

Guia completo para quem não programa

Pré-requisitos

  1. Node.js 18 ou mais novo. É o programa que faz o servidor rodar; os comandos npm e npx vêm junt
Read from source at commit f2a2a6401b83OBSERVED · 2026-10-14
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (npm)
claude mcp add mcp-server-google-forms -- npx -y [email protected]
03

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (3)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
scripts/get-token.js:130
exec(cmd, () => {});
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@googleapis/forms, @modelcontextprotocol/sdk, google-auth-library, zod
Why it matters. 4 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-14 · audit v0.4.1 · source sha f2a2a6401b83full audit observations/trust-audit/mcp-server/claude-book__mcp-server-google-forms.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-14f2a2a6401b83BLOCKD69first audit
05

Questions

What is the claude-book-google-forms MCP server?

Servidor MCP local para criar, editar e publicar Google Forms a partir do Claude Code — código de exemplo do livro sobre Claude Code

Is claude-book-google-forms safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does claude-book-google-forms need?

No credential environment variables were found in its source, so it appears to need none.

How does claude-book-google-forms run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-server-google-forms at 0.6.0.

How current is this page?

The grade is for one exact copy of the source (f2a2a6401b83), read on 2026-10-14. The repository is watched and re-audited when it changes.

Advertisement