# io.github.moooonad/mcp-google-sheets-full (npm · mcp-google-sheets-full)

Full Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.

- Trust score: 64/100 (medium)
- Change this week: +21
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `mcp-google-sheets-full`: 64/100 (this document), [markdown](https://verifymcp.io/servers/moooonad-mcp-google-sheets-full/mcp-google-sheets-full.md), [page](https://verifymcp.io/servers/moooonad-mcp-google-sheets-full/mcp-google-sheets-full)

## Channel facts

- Registry: `npm`
- Package: `mcp-google-sheets-full`
- Version: `0.2.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 79/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects uuid 9.0.1, reached via googleapis > googleapis-common > uuid. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (120 of 124), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 72 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3182 tokens (~122/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 88/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 65% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add moooonad-mcp-google-sheets-full -- npx -y mcp-google-sheets-full
```

### Codex

```bash
codex mcp add moooonad-mcp-google-sheets-full -- npx -y mcp-google-sheets-full
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "moooonad-mcp-google-sheets-full": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mcp-google-sheets-full"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add moooonad-mcp-google-sheets-full --command npx --arg -y --arg mcp-google-sheets-full
```

### Hermes

```yaml
mcp_servers:
  moooonad-mcp-google-sheets-full:
    command: "npx"
    args: ["-y", "mcp-google-sheets-full"]
```

### Other

```json
{
  "mcpServers": {
    "moooonad-mcp-google-sheets-full": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-google-sheets-full"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 64, +3)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 61, +42)

- [security regression] CVE-2026-41907 affects this package: high
- [security regression] Known CVEs: unverified → fail
- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional] First check of Schema quality: unverified
- [functional] Licence: MIT

### 2026-07-31 (score 19, −6)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 25, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 43)

First indexed and scored.

## MCP tools (26)

### `get_spreadsheet` (~125 tokens)

Return spreadsheet metadata: title, list of sheets (tabs) with sheetId/title/index/gridProperties. Use this first when working on an unknown spreadsheet to discover tab names and gids. Set include_grid_data=true to also return cell data (large).

Input parameters:

- `include_grid_data` (boolean): Include full grid data. Default false.
- `ranges` (array): Optional A1 ranges to limit returned data.
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

### `get_values` (~109 tokens)

Read values from an A1 range (e.g. 'Sheet1!A1:D100'). Returns a 2D array of cell values.

Input parameters:

- `range` (string, required): A1 range, e.g. 'Sheet1!A1:D100'.
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `value_render_option` (string): Default FORMATTED_VALUE.

### `batch_get_values` (~69 tokens)

Read multiple A1 ranges in one call.

Input parameters:

- `ranges` (array, required)
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `value_render_option` (string)

### `update_values` (~116 tokens)

Write a 2D array of values into an A1 range. Use value_input_option='USER_ENTERED' to evaluate formulas, 'RAW' to write literal strings.

Input parameters:

- `range` (string, required)
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `value_input_option` (string): Default USER_ENTERED.
- `values` (array, required): 2D array of cell values (rows of columns).

### `batch_update_values` (~78 tokens)

Update multiple A1 ranges in one call. Each item is { range, values }.

Input parameters:

- `data` (array, required)
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `value_input_option` (string)

### `append_values` (~93 tokens)

Append rows to the end of a table. The range is used as the search hint.

Input parameters:

- `insert_data_option` (string)
- `range` (string, required)
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `value_input_option` (string)
- `values` (array, required)

### `clear_values` (~77 tokens)

Clear all values from one or more A1 ranges. Pass a single range or use ranges[].

Input parameters:

- `range` (string)
- `ranges` (array)
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

### `batch_update` (~143 tokens)

Run a structural batchUpdate on the spreadsheet (add/delete sheets, formatting, merges, freeze, conditional formatting, etc.). 'requests' is the Google Sheets API batchUpdate request array. See https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets/request.

Input parameters:

- `include_spreadsheet_in_response` (boolean)
- `requests` (array, required): Array of Request objects per the Sheets API.
- `response_include_grid_data` (boolean)
- `response_ranges` (array)
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

### `list_spreadsheets` (~124 tokens)

List Google Sheets files in the user's Drive (most-recently-modified first). Returns id, name, modifiedTime, webViewLink. Use this when the user mentions a sheet by name without giving the ID.

Input parameters:

- `include_shared_drives` (boolean): Include items in Shared Drives. Default true.
- `order_by` (string): Drive 'orderBy' string, e.g. 'modifiedTime desc' (default), 'name', 'createdTime desc'.
- `page_size` (number): Max results (1-1000, default 50).

### `search_spreadsheets` (~138 tokens)

Search spreadsheets in the user's Drive by name (substring, case-insensitive) and/or full-text content. At least one of `name_contains` or `full_text` is required. Use this when the user refers to a sheet by part of its title.

Input parameters:

- `full_text` (string): Full-text search across spreadsheet content.
- `include_shared_drives` (boolean): Default true.
- `name_contains` (string): Substring of the file name.
- `order_by` (string): Drive orderBy, default 'modifiedTime desc'.
- `page_size` (number): Max results (1-1000, default 50).

### `create_spreadsheet` (~56 tokens)

Create a new spreadsheet owned by the authenticated user. Returns the new spreadsheetId and URL.

Input parameters:

- `sheet_titles` (array): Optional initial tab names. If omitted, one default sheet is created.
- `title` (string, required)

### `add_sheet` (~105 tokens)

Add a new tab (sheet) to the spreadsheet. Returns the new sheetId.

Input parameters:

- `column_count` (number): Optional initial column count.
- `index` (number): Optional 0-based position.
- `row_count` (number): Optional initial row count.
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `title` (string, required): Tab name.

### `delete_sheet` (~98 tokens)

Delete a tab. Pass either sheet_id (gid) or sheet_name.

Input parameters:

- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

### `duplicate_sheet` (~126 tokens)

Duplicate a tab within the same spreadsheet. Returns the new sheetId.

Input parameters:

- `insert_index` (number): Optional 0-based position of the copy.
- `new_title` (string, required): Title for the duplicated tab.
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

### `rename_sheet` (~95 tokens)

Rename a tab.

Input parameters:

- `new_title` (string, required)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.

### `insert_rows` (~159 tokens)

Insert N empty rows starting at start_index (0-based, half-open: rows [start_index, start_index+count) are inserted).

Input parameters:

- `count` (number, required): Number of rows to insert.
- `inherit_from_before` (boolean): If true, formatting inherited from row above. Default false.
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_index` (number, required): 0-based row index where insertion begins.

### `insert_columns` (~119 tokens)

Insert N empty columns starting at start_index (0-based).

Input parameters:

- `count` (number, required)
- `inherit_from_before` (boolean)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_index` (number, required)

### `delete_rows` (~117 tokens)

Delete rows in range [start_index, end_index) (0-based, half-open).

Input parameters:

- `end_index` (number, required)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_index` (number, required)

### `delete_columns` (~117 tokens)

Delete columns in range [start_index, end_index) (0-based, half-open).

Input parameters:

- `end_index` (number, required)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_index` (number, required)

### `merge_cells` (~163 tokens)

Merge a cell range. merge_type controls how: MERGE_ALL (default), MERGE_COLUMNS (merge each column), MERGE_ROWS (merge each row).

Input parameters:

- `end_column` (number, required)
- `end_row` (number, required): 0-based exclusive.
- `merge_type` (string)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_column` (number, required)
- `start_row` (number, required): 0-based inclusive.

### `unmerge_cells` (~126 tokens)

Unmerge all merges within the given cell range.

Input parameters:

- `end_column` (number, required)
- `end_row` (number, required)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_column` (number, required)
- `start_row` (number, required)

### `format_cells` (~235 tokens)

Apply a CellFormat to a range. Pass a partial CellFormat object as 'format' (e.g. { backgroundColor: { red: 1 }, textFormat: { bold: true, fontSize: 12 }, horizontalAlignment: 'CENTER', numberFormat: { type: 'NUMBER', pattern: '#,##0.00' } }). Only the provided keys are updated. See https://developers.google.com/sheets/api/reference/rest/v4/spreadsheets/cells#CellFormat.

Input parameters:

- `end_column` (number, required)
- `end_row` (number, required)
- `format` (object, required): Partial CellFormat. The keys you set determine the update mask.
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_column` (number, required)
- `start_row` (number, required)

### `set_borders` (~222 tokens)

Set borders on a range. Pass per-side Border objects in 'borders' (top/bottom/left/right/innerHorizontal/innerVertical). Each Border = { style: 'SOLID'|'DOTTED'|'DASHED'|'SOLID_MEDIUM'|'SOLID_THICK'|'DOUBLE'|'NONE', color?: { red,green,blue,alpha } }.

Input parameters:

- `borders` (object, required): Object with optional keys: top, bottom, left, right, innerHorizontal, innerVertical.
- `end_column` (number, required)
- `end_row` (number, required)
- `sheet_id` (number): Numeric sheet (tab) ID, i.e. the gid. Preferred.
- `sheet_name` (string): Tab name (used only if sheet_id is omitted).
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `start_column` (number, required)
- `start_row` (number, required)

### `run_sheets_script` (~261 tokens)

Escape hatch: execute an arbitrary Node.js script with full Google Sheets/Drive access. Use when no dedicated tool covers the operation, or when multiple coordinated calls are needed. The script runs in a fresh Node process with these globals already prepared: `sheets` (Sheets v4 client), `drive` (Drive v3 client), `google` (googleapis namespace), `auth` (OAuth2Client), `spreadsheetId` (string). Use `await` freely — the harness wraps your code in an async IIFE. To return a structured value to the caller, assign to `result` (e.g. `result = { rows: 12 };`). console.log output is captured as stdout. The temp file is always deleted, even on error.

Input parameters:

- `code` (string, required): Node.js source code. Has access to: sheets, drive, google, auth, spreadsheetId. Use top-level await. Assign to `result` to return a value.
- `spreadsheetId` (string, required): Google Sheets spreadsheet ID (the string between /d/ and /edit in the URL). Always required and explicit — there is no default.
- `timeout_ms` (number): Default 120000 (2 min). Max 600000.

### `resolve_url` (~47 tokens)

Parse a Google Sheets URL and extract spreadsheetId and gid (tab id). Convenience helper so the user can paste a URL and the caller can grab the IDs.

Input parameters:

- `url` (string, required)

### `auth_status` (~64 tokens)

Report the current auth configuration. Two modes: 'oauth' (default, interactive user account) or 'service_account' (GOOGLE_APPLICATION_CREDENTIALS env set, headless). Returns mode, expected file paths, and which files are present. Use to debug setup problems.

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/moooonad-mcp-google-sheets-full/mcp-google-sheets-full#diagnostics

## Score history

- 2026-08-03: 64
- 2026-08-02: 61
- 2026-08-01: 19
- 2026-07-31: 19
- 2026-07-30: 25
- 2026-07-28: 43
- 2026-07-27: 43

## Links

- npm package: https://www.npmjs.com/package/mcp-google-sheets-full
- Socket report: https://socket.dev/npm/package/mcp-google-sheets-full
- Repository: https://github.com/moooonad/mcp-google-sheets-full
- Changelog RSS feed: https://verifymcp.io/servers/moooonad-mcp-google-sheets-full/mcp-google-sheets-full/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/moooonad-mcp-google-sheets-full/mcp-google-sheets-full/changelog.json
- HTML version of this page: https://verifymcp.io/servers/moooonad-mcp-google-sheets-full/mcp-google-sheets-full