io.github.moooonad/mcp-google-sheets-full

NPM · MCP-GOOGLE-SHEETS-FULL · SCANNED AUG 3

Full Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.

Available components

+21 this week 64 64 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security79

No malware found by supply-chain analysis.Pass
CVE check failed: a known high-severity CVE affects uuid 9.0.1, reached via googleapis > googleapis-common > uuid. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (120 of 124), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 72 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability70

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 3182 tokens (~122/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage88

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
65% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · mcp-google-sheets-full

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add moooonad-mcp-google-sheets-full -- npx -y mcp-google-sheets-full

# add to Codex CLI

codex mcp add moooonad-mcp-google-sheets-full -- npx -y mcp-google-sheets-full

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "moooonad-mcp-google-sheets-full": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mcp-google-sheets-full"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add moooonad-mcp-google-sheets-full --command npx --arg -y --arg mcp-google-sheets-full

# ~/.hermes/config.yaml

mcp_servers:
  moooonad-mcp-google-sheets-full:
    command: "npx"
    args: ["-y", "mcp-google-sheets-full"]

// mcp.json

{
  "mcpServers": {
    "moooonad-mcp-google-sheets-full": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-google-sheets-full"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +3
- Stability: unverified → 0.23 ▲ functional
2 Aug 26 +42
- CVE-2026-41907 affects this package: high ▼ security
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Security disclosure: fail → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- First check of Schema quality: unverified functional
- Licence: MIT functional
31 Jul 26 −6
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 43

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding

ID	CVE	Severity	Vector	Fix available
GHSA-w5hq-g745-h8pq	CVE-2026-41907	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	yes

Dependencies 120 packages

120 packages in the resolved dependency tree · 120 deprecated · 38 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 26 exposed · ~3,182 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

add_sheet ~105

Add a new tab (sheet) to the spreadsheet. Returns the new sheetId.

Input Output Examples

Name	Type	Req	Description
column_count	number	—	Optional initial column count.
index	number	—	Optional 0-based position.
row_count	number	—	Optional initial row count.
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
title	string	yes	Tab name.

No output schema declared.

No examples provided.

append_values ~93

Append rows to the end of a table. The range is used as the search hint.

Input Output Examples

Name	Type	Req	Description
insert_data_option	string	—	—
range	string	yes	—
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
value_input_option	string	—	—
values	array	yes	—

No output schema declared.

No examples provided.

auth_status ~64

Report the current auth configuration. Two modes: 'oauth' (default, interactive user account) or 'service_account' (GOOGLE_APPLICATION_CREDENTIALS env set, headless). Returns mode, expected file paths, and which files are present. Use to debug setup problems.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

batch_get_values ~69

Read multiple A1 ranges in one call.

Input Output Examples

Name	Type	Req	Description
ranges	array	yes	—
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
value_render_option	string	—	—

No output schema declared.

No examples provided.

batch_update ~143

Run a structural batchUpdate on the spreadsheet (add/delete sheets, formatting, merges, freeze, conditional formatting, etc.). 'requests' is the Google Sheets API batchUpdate request array. See https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets/request.

Input Output Examples

Name	Type	Req	Description
include_spreadsheet_in_response	boolean	—	—
requests	array	yes	Array of Request objects per the Sheets API.
response_include_grid_data	boolean	—	—
response_ranges	array	—	—
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

No output schema declared.

No examples provided.

batch_update_values ~78

Update multiple A1 ranges in one call. Each item is { range, values }.

Input Output Examples

Name	Type	Req	Description
data	array	yes	—
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
value_input_option	string	—	—

No output schema declared.

No examples provided.

clear_values ~77

Clear all values from one or more A1 ranges. Pass a single range or use ranges[].

Input Output Examples

Name	Type	Req	Description
range	string	—	—
ranges	array	—	—
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

No output schema declared.

No examples provided.

create_spreadsheet ~56

Create a new spreadsheet owned by the authenticated user. Returns the new spreadsheetId and URL.

Input Output Examples

Name	Type	Req	Description
sheet_titles	array	—	Optional initial tab names. If omitted, one default sheet is created.
title	string	yes	—

No output schema declared.

No examples provided.

delete_columns ~117

Delete columns in range [start_index, end_index) (0-based, half-open).

Input Output Examples

Name	Type	Req	Description
end_index	number	yes	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_index	number	yes	—

No output schema declared.

No examples provided.

delete_rows ~117

Delete rows in range [start_index, end_index) (0-based, half-open).

Input Output Examples

Name	Type	Req	Description
end_index	number	yes	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_index	number	yes	—

No output schema declared.

No examples provided.

delete_sheet ~98

Delete a tab. Pass either sheet_id (gid) or sheet_name.

Input Output Examples

Name	Type	Req	Description
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

No output schema declared.

No examples provided.

duplicate_sheet ~126

Duplicate a tab within the same spreadsheet. Returns the new sheetId.

Input Output Examples

Name	Type	Req	Description
insert_index	number	—	Optional 0-based position of the copy.
new_title	string	yes	Title for the duplicated tab.
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

No output schema declared.

No examples provided.

format_cells ~235

Apply a CellFormat to a range. Pass a partial CellFormat object as 'format' (e.g. { backgroundColor: { red: 1 }, textFormat: { bold: true, fontSize: 12 }, horizontalAlignment: 'CENTER', numberFormat: { type: 'NUMBER', pattern: '#,##0.00' } }). Only the provided keys are updated. See https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets/cells#CellFormat.

Input Output Examples

Name	Type	Req	Description
end_column	number	yes	—
end_row	number	yes	—
format	object	yes	Partial CellFormat. The keys you set determine the update mask.
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_column	number	yes	—
start_row	number	yes	—

No output schema declared.

No examples provided.

get_spreadsheet ~125

Return spreadsheet metadata: title, list of sheets (tabs) with sheetId/title/index/gridProperties. Use this first when working on an unknown spreadsheet to discover tab names and gids. Set include_grid_data=true to also return cell data (large).

Input Output Examples

Name	Type	Req	Description
include_grid_data	boolean	—	Include full grid data. Default false.
ranges	array	—	Optional A1 ranges to limit returned data.
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

No output schema declared.

No examples provided.

get_values ~109

Read values from an A1 range (e.g. 'Sheet1!A1:D100'). Returns a 2D array of cell values.

Input Output Examples

Name	Type	Req	Description
range	string	yes	A1 range, e.g. 'Sheet1!A1:D100'.
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
value_render_option	string	—	Default FORMATTED_VALUE.

No output schema declared.

No examples provided.

insert_columns ~119

Insert N empty columns starting at start_index (0-based).

Input Output Examples

Name	Type	Req	Description
count	number	yes	—
inherit_from_before	boolean	—	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_index	number	yes	—

No output schema declared.

No examples provided.

insert_rows ~159

Insert N empty rows starting at start_index (0-based, half-open: rows [start_index, start_index+count) are inserted).

Input Output Examples

Name	Type	Req	Description
count	number	yes	Number of rows to insert.
inherit_from_before	boolean	—	If true, formatting inherited from row above. Default false.
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_index	number	yes	0-based row index where insertion begins.

No output schema declared.

No examples provided.

list_spreadsheets ~124

List Google Sheets files in the user's Drive (most-recently-modified first). Returns id, name, modifiedTime, webViewLink. Use this when the user mentions a sheet by name without giving the ID.

Input Output Examples

Name	Type	Req	Description
include_shared_drives	boolean	—	Include items in Shared Drives. Default true.
order_by	string	—	Drive 'orderBy' string, e.g. 'modifiedTime desc' (default), 'name', 'createdTime desc'.
page_size	number	—	Max results (1-1000, default 50).

No output schema declared.

No examples provided.

merge_cells ~163

Merge a cell range. merge_type controls how: MERGE_ALL (default), MERGE_COLUMNS (merge each column), MERGE_ROWS (merge each row).

Input Output Examples

Name	Type	Req	Description
end_column	number	yes	—
end_row	number	yes	0-based exclusive.
merge_type	string	—	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_column	number	yes	—
start_row	number	yes	0-based inclusive.

No output schema declared.

No examples provided.

rename_sheet ~95

Rename a tab.

Input Output Examples

Name	Type	Req	Description
new_title	string	yes	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

No output schema declared.

No examples provided.

resolve_url ~47

Parse a Google Sheets URL and extract spreadsheetId and gid (tab id). Convenience helper so the user can paste a URL and the caller can grab the IDs.

Input Output Examples

Name	Type	Req	Description
url	string	yes	—

No output schema declared.

No examples provided.

run_sheets_script ~261

Escape hatch: execute an arbitrary Node.js script with full Google Sheets/Drive access. Use when no dedicated tool covers the operation, or when multiple coordinated calls are needed. The script runs in a fresh Node process with these globals already prepared: `sheets` (Sheets v4 client), `drive` (Drive v3 client), `google` (googleapis namespace), `auth` (OAuth2Client), `spreadsheetId` (string). Use `await` freely — the harness wraps your code in an async IIFE. To return a structured value to the caller, assign to `result` (e.g. `result = { rows: 12 };`). console.log output is captured as stdout. The temp file is always deleted, even on error.

Input Output Examples

Name	Type	Req	Description
code	string	yes	Node.js source code. Has access to: sheets, drive, google, auth, spreadsheetId. Use top-level await. Assign to `result` to return a value.
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
timeout_ms	number	—	Default 120000 (2 min). Max 600000.

No output schema declared.

No examples provided.

search_spreadsheets ~138

Search spreadsheets in the user's Drive by name (substring, case-insensitive) and/or full-text content. At least one of `name_contains` or `full_text` is required. Use this when the user refers to a sheet by part of its title.

Input Output Examples

Name	Type	Req	Description
full_text	string	—	Full-text search across spreadsheet content.
include_shared_drives	boolean	—	Default true.
name_contains	string	—	Substring of the file name.
order_by	string	—	Drive orderBy, default 'modifiedTime desc'.
page_size	number	—	Max results (1-1000, default 50).

No output schema declared.

No examples provided.

set_borders ~222

Set borders on a range. Pass per-side Border objects in 'borders' (top/bottom/left/right/innerHorizontal/innerVertical). Each Border = { style: 'SOLID'|'DOTTED'|'DASHED'|'SOLID_MEDIUM'|'SOLID_THICK'|'DOUBLE'|'NONE', color?: { red,green,blue,alpha } }.

Input Output Examples

Name	Type	Req	Description
borders	object	yes	Object with optional keys: top, bottom, left, right, innerHorizontal, innerVertical.
end_column	number	yes	—
end_row	number	yes	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_column	number	yes	—
start_row	number	yes	—

No output schema declared.

No examples provided.

unmerge_cells ~126

Unmerge all merges within the given cell range.

Input Output Examples

Name	Type	Req	Description
end_column	number	yes	—
end_row	number	yes	—
sheet_id	number	—	Numeric sheet (tab) ID, i.e. the gid. Preferred.
sheet_name	string	—	Tab name (used only if sheet_id is omitted).
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
start_column	number	yes	—
start_row	number	yes	—

No output schema declared.

No examples provided.

update_values ~116

Write a 2D array of values into an A1 range. Use value_input_option='USER_ENTERED' to evaluate formulas, 'RAW' to write literal strings.

Input Output Examples

Name	Type	Req	Description
range	string	yes	—
spreadsheetId	string	yes	Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
value_input_option	string	—	Default USER_ENTERED.
values	array	yes	2D array of cell values (rows of columns).

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug