Back to Browse

Google Forms MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for the Google Forms API: create forms, manage questions, read responses and watches.

About

MCP server for the Google Forms API: create forms, manage questions, read responses and watches.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (6/6 approved).

4 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Google OAuth2 client id (refresh-token flow).Optional

Environment variable: GOOGLE_FORMS_CLIENT_ID

Google OAuth2 client secret (refresh-token flow). Treat it as a secret.Required

Environment variable: GOOGLE_FORMS_CLIENT_SECRET

Google OAuth2 refresh token, exchanged for access tokens automatically. Treat it as a secret.Required

Environment variable: GOOGLE_FORMS_REFRESH_TOKEN

Static OAuth2 access token (~1h lifetime) — alternative to the refresh-token trio, mostly for testing.Required

Environment variable: GOOGLE_FORMS_ACCESS_TOKEN

API root override.Optional

Environment variable: GOOGLE_FORMS_API_BASE

Per-request timeout in milliseconds.Optional

Environment variable: GOOGLE_FORMS_TIMEOUT_MS

Retries on transient errors (429 always; 5xx/network for reads).Optional

Environment variable: GOOGLE_FORMS_MAX_RETRIES

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-a1-x-tech-mcp-google-forms": {
      "env": {
        "GOOGLE_FORMS_API_BASE": "your-google-forms-api-base-here",
        "GOOGLE_FORMS_CLIENT_ID": "your-google-forms-client-id-here",
        "GOOGLE_FORMS_TIMEOUT_MS": "your-google-forms-timeout-ms-here",
        "GOOGLE_FORMS_MAX_RETRIES": "your-google-forms-max-retries-here",
        "GOOGLE_FORMS_ACCESS_TOKEN": "your-google-forms-access-token-here",
        "GOOGLE_FORMS_CLIENT_SECRET": "your-google-forms-client-secret-here",
        "GOOGLE_FORMS_REFRESH_TOKEN": "your-google-forms-refresh-token-here"
      },
      "args": [
        "-y",
        "mcp-google-forms"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Google Forms MCP

npm CI Glama License: MIT

MCP server for the Google Forms API: create forms, add and edit questions, publish, read responses and set up push notifications for new submissions — from Claude, Cursor, Codex and other AI clients, in natural language.

Ask your assistant to "make a customer-feedback survey with a rating question and publish it", "show me yesterday's responses", or "close the form for responses" — it drives the Forms API for you, from a blank form to response analysis.

Quick start

  1. Get OAuth credentials for the Google Forms API.

  2. Add the server — for example, in Claude Code (other clients):

    claude mcp add google-forms \
      -e GOOGLE_FORMS_CLIENT_ID=your_client_id \
      -e GOOGLE_FORMS_CLIENT_SECRET=your_client_secret \
      -e GOOGLE_FORMS_REFRESH_TOKEN=your_refresh_token \
      -- npx -y mcp-google-forms
    
  3. Ask the assistant: "Create a form called 'Team lunch survey' with a dropdown of three restaurants and publish it."

Tools

ToolDescription
create_formCreate a form (optionally publish it right away — API-created forms start unpublished).
get_formFull form structure: info, settings, items with ids, publish state, responder URL.
update_form_infoChange the title, description or document title.
update_form_settingsToggle quiz mode and email collection.
add_questionAdd a question: text, paragraph, radio, checkbox, dropdown, scale, date, time, rating.
update_questionUpdate an existing item by index with an explicit update mask.
delete_itemDelete the item at an index.
move_itemReorder items.
set_publish_settingsPublish/unpublish, open/close response collection.
list_responsesList submissions, incrementally with submitted_after; paginated.
get_responseFetch one submission by id.
manage_watchesCreate/list/delete/renew Cloud Pub/Sub push-notification watches.
raw_requestEscape hatch: any Forms API v1 path (e.g. a custom batchUpdate with grids).

Plus resilience built in: automatic OAuth token refresh (including on 401), retries with backoff on 429 (and on 5xx/network errors for reads only — writes are never replayed), a request timeout, and an SSRF guard so the token can't leak to a foreign host.

Example prompts

  • "Create an RSVP form for the offsite, ask for name, meal preference (veg/meat/fish) and arrival date, then publish it and give me the link."
  • "Turn the 'Onboarding quiz' form into a quiz and make every question required."
  • "How many responses came in since Monday? Summarize the free-text feedback."
  • "Stop accepting responses on the feedback form."

Limitations (the API's, not the server's)

  • Responses are read-only. The Forms API cannot submit or edit responses — there is no such endpoint, so this server has no submit tool either.
  • API-created forms start unpublished and don't accept responses until published — use publish: true on create_form or set_publish_settings. Legacy forms (from before the publish model) don't support set_publish_settings at all.
  • File-upload questions can't be created via the API (existing ones are readable).
  • Quotas are per minute (reads 975/project, list_responses 450, writes 375); the server backs off on 429 automatically.

Installation

Requires Node.js 20+ (runs via npx, no separate install).

claude mcp add google-forms \
  -e GOOGLE_FORMS_CLIENT_ID=your_client_id \
  -e GOOGLE_FORMS_CLIENT_SECRET=your_client_secret \
  -e GOOGLE_FORMS_REFRESH_TOKEN=your_refresh_token \
  -- npx -y mcp-google-forms

claude_desktop_config.json — macOS ~/Library/Application Support/Claude/, Windows %APPDATA%\Claude\

{
  "mcpServers": {
    "google-forms": {
      "command": "npx",
      "args": ["-y", "mcp-google-forms"],
      "env": {
        "GOOGLE_FORMS_CLIENT_ID": "your_client_id",
        "GOOGLE_FORMS_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_FORMS_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

~/.cursor/mcp.json (or .cursor/mcp.json in the project)

{
  "mcpServers": {
    "google-forms": {
      "command": "npx",
      "args": ["-y", "mcp-google-forms"],
      "env": {
        "GOOGLE_FORMS_CLIENT_ID": "your_client_id",
        "GOOGLE_FORMS_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_FORMS_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

.vscode/mcp.json — note the servers key (not mcpServers)

{
  "servers": {
    "google-forms": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "mcp-google-forms"],
      "env": {
        "GOOGLE_FORMS_CLIENT_ID": "your_client_id",
        "GOOGLE_FORMS_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_FORMS_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

Getting credentials

The Forms API has no API-key access — every call needs OAuth 2.0. One-time setup, ~10 minutes:

  1. Create a Google Cloud project (or reuse one) at console.cloud.google.com, then enable the Google Forms API: APIs & Services → Library → Google Forms API → Enable.
  2. Configure the OAuth consent screen (APIs & Services → OAuth consent screen): choose External, fill in the app name and your email, and add your Google account under Test users (in Testing mode only listed users can authorize — no app verification needed).
  3. Create an OAuth client (APIs & Services → Credentials → Create credentials → OAuth client ID), application type Desktop app. Save the client ID and client secret.
  4. Mint a refresh token. The easiest way is the OAuth 2.0 Playground:
    • Click the gear icon → check Use your own OAuth credentials → paste your client ID and secret (add https://developers.google.com/oauthplayground as an authorized redirect URI to the OAuth client first).
    • In Step 1, enter the scopes https://www.googleapis.com/auth/forms.body https://www.googleapis.com/auth/forms.responses.readonly and click Authorize APIs, signing in with the test-user account.
    • In Step 2, click Exchange authorization code for tokens and copy the refresh token.
  5. Put the three values into GOOGLE_FORMS_CLIENT_ID, GOOGLE_FORMS_CLIENT_SECRET and GOOGLE_FORMS_REFRESH_TOKEN. The server exchanges the refresh token for short-lived access tokens automatically.

Scope notes: forms.body + forms.responses.readonly is the minimal, recommended pair (no broad Drive access). While the consent screen stays in Testing mode, refresh tokens expire after 7 days — publish the app (or keep it Internal in a Workspace domain) for long-lived tokens.

⚠️ The credentials are stored in plain text in your client's config — treat them like a password. The refresh token grants access to your forms until revoked at myaccount.google.com/permissions.

Configuration

VariableRequiredDefaultDescription
GOOGLE_FORMS_CLIENT_IDyes*OAuth2 client id (refresh flow).
GOOGLE_FORMS_CLIENT_SECRETyes*OAuth2 client secret (refresh flow).
GOOGLE_FORMS_REFRESH_TOKENyes*OAuth2 refresh token (refresh flow).
GOOGLE_FORMS_ACCESS_TOKENyes*Alternative: a static access token (~1 h lifetime), mostly for testing.
GOOGLE_FORMS_API_BASEnohttps://forms.googleapis.comAPI root override.
GOOGLE_FORMS_TIMEOUT_MSno60000Per-request timeout, ms.
GOOGLE_FORMS_MAX_RETRIESno3Retries on transient errors.

* Either the three refresh-flow variables together, or GOOGLE_FORMS_ACCESS_TOKEN.

Documentation

  • All tools — full reference with parameters and notes.
  • Development — build, tests, smoke check, telemetry.
  • Publishing — releasing and MCP-catalog listing.

Support

Questions, ideas, issues — Telegram @gistrec or GitHub issues.

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!