Google Sheets & FormsBLOCK
MCP Code Example
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A simple MCP server that provides tools, resources, and prompts for working with Google Sheets and Google Forms.
Features
Tools
list_spreadsheets- List your Google Spreadsheetsread_sheet- Read data from a Google Sheetwrite_sheet- Write data to a Google Sheetappend_sheet- Append data to a Google Sheetcreate_spreadsheet- Create a new spreadsheetcreate_form- Create a new Google Form
Resources
sheet://{spreadsheet_id}/{range_name}- Access sheet data as a resource
Prompts
analyze_sheet_data- Template for analyzing sheet datacreate_report_template- Template for creating report spreadsheetsform_to_sheet- Template for form-to-sheet workflow
Setup
1. Create virtual environment
cd gsheets-mcp-server python -m venv .venv source .venv/bin/activate # On Windows: .venv\Scripts\activate
2. Install dependencies
pip install -r requirements.txt
3. Get Google API Credentials
- Go to Google Cloud Console
- Create a new project or select existing one
- Enable the following APIs:
- Google Sheets API
- Google Forms API
- Google Drive API
- Go to "Credentials" → "Create Credentials" → "OAuth client ID"
- Choose "Desktop app" as application type
- Download the credentials JSON file
- Save it as
credentials.jsonin this directory
4. Test the server with MCP Inspector
npx @modelcontextprotocol/inspector python gsheets_server.py
Claude Desktop Configuration
Add this to your Claude Desktop config file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"gsheets": {
"command": "python",
"args": [
"/FULL/PATH/TO/gsheets-mcp-server/gsheets_server.py"
],
"env": {
"GOOGLE_CREDENTIALS_PATH": "/FULL/PATH/TO/gsheets-ac067a307d55OBSERVED · 2026-10-08Exposed tools (6)
3 read · 3 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
append_sheet | read | |
create_form | write | |
create_spreadsheet | write | |
list_spreadsheets | read | |
read_sheet | read | |
write_sheet | write |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
creds = pickle.load(token)
fastmcp, google-auth-oauthlib, google-auth-httplib2, google-api-python-client
Gates applied: no_behavioural_pass, no_license.
ac067a307d55full audit observations/trust-audit/mcp-server/hellotinah__google-sheets-forms.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | ac067a307d55 | BLOCK | D | 69 | first audit |
Questions
What is the Google Sheets & Forms MCP server?
MCP Code Example
What tools does Google Sheets & Forms expose?
6 in total: 3 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Google Sheets & Forms safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Google Sheets & Forms need?
It reads GOOGLE_CREDENTIALS_PATH from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Google Sheets & Forms run?
It speaks stdio, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (ac067a307d55), read on 2026-10-08. The repository is watched and re-audited when it changes.