Google Sheets Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Google Sheets Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Powerful tools for automating Google Sheets using Model Context Protocol (MCP)
mcp-name: io.github.henilcalagiya/google-sheets-mcp
Google Sheets MCP Server provides seamless integration of Google Sheets with any MCP-compatible client. It enables full spreadsheet automation — including creating, reading, updating, and deleting sheets — through a simple and secure API layer.
uvxuv package manager (for uvx command)Install uv:
# macOS/Linux
curl -LsSf https://astral.sh/uv/install.sh | sh
# Windows PowerShell
irm https://astral.sh/uv/install.ps1 | iexStep 1: Create a Google Cloud Project
Step 2: Enable Required APIs
Step 3: Create Service Account
Step 4: Generate JSON Key
Step 5: Extract Required Values Open the downloaded JSON file and note these values:
project_id (e.g., "my-sheets-automation-123456")private_key_id (e.g., "a4ae73111b11b2c3b07cc01006e71eb8230dfa29")private_key (the long private key starting with "-----BEGIN PRIVATE KEY-----")client_email (e.g., "sheets-mcp-service@my-sheets-automation-123456.iam.gserviceaccount.com")client_id (e.g., "113227823918217958816")client_x509_cert_url (e.g., "https://www.googleapis.com/robot/v1/metadata/x509/sheets-mcp-service%40my-sheets-automation-123456.iam.gserviceaccount.com")Example Google service account JSON structure:
{
"type": "service_account",
"project_id": "your-project-id",
"private_key_id": "your-private-key-id",
"private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
"client_email": "[email protected]",
"client_id": "your-client-id",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/your-service%40your-project.iam.gserviceaccount.com"
}{
"mcpServers": {
"google-sheets-mcp": {
"command": "uvx",
"args": ["google-sheets-mcp@latest"],
"env": {
"project_id": "your-project-id",
"private_key_id": "your-private-key-id",
"private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
"client_email": "[email protected]",
"client_id": "your-client-id",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/your-service%40your-project.iam.gserviceaccount.com"
}
}
}
}💡 Pro Tip: You can copy the values directly from your Google service account JSON file. The field names in the JSON file are used exactly as they are - no changes needed!
🔄 Backward Compatibility: The server also supports the old GOOGLE_ prefixed variable names (e.g., GOOGLE_PROJECT_ID) for existing configurations.
[email protected]) and assign Editor access.🎉 You're all set! Your MCP client will automatically install and run the package when needed.
This project is licensed under the MIT License - see the LICENSE file for details.
Henil C Alagiya
Support & Contributions:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.