Back to Browse

Sheetport MCP Server

Developer ToolsModerate5.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

Google Sheets spreadsheets and cell values via the Sheets API, as MCP tools.

About

Google Sheets spreadsheets and cell values via the Sheets API, as MCP tools.

Security Report

5.6
Moderate5.6Moderate Risk

sheetport is a well-scoped Google Sheets MCP server that authenticates via a GOOGLE_ACCESS_TOKEN environment variable, sends requests only to the Google Sheets API v4 (overridable via SHEETS_API_URL), and validates tool arguments with zod. Its only notable items are low-severity: the SHEETS_API_URL override could redirect the bearer token if misconfigured, and values are written with USER_ENTERED interpretation, which can trigger spreadsheet formulas. No exfiltration, shell execution, or hardcoded credentials were found. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

stdio

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

GOOGLE_ACCESS_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-sheetport": {
      "env": {
        "GOOGLE_ACCESS_TOKEN": "your-google-access-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/sheetport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

sheetport

Google Sheets spreadsheets and cell values as MCP tools, talking to the Google Sheets API v4. sheetport is a clean-room rebuild of the core subset of the Google Sheets MCP surface, under a new name: spreadsheet and value operations plus basic sheet management, fresh code, no copied branding.

Tools (core subset, 10)

get_spreadsheet, create_spreadsheet, get_values, update_values, append_values, clear_values, batch_update_values, add_sheet, copy_sheet, rename_sheet.

Formatting, charts, pivot tables, conditional formatting, developer metadata, protected ranges, named ranges, general spreadsheet batchUpdate passthrough and Drive file operations are not in this subset.

Setup

Set a Google OAuth access token:

export GOOGLE_ACCESS_TOKEN=ya29....

Optionally override the API base with SHEETS_API_URL (default https://sheets.googleapis.com/v4). Without the token, every tool call fails with an error naming the missing variable.

CLI

npx @reneturcios/sheetport get_values '{"spreadsheet_id":"abc","range":"Sheet1!A1:B2"}'
npx @reneturcios/sheetport mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "sheetport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/sheetport", "mcp"],
      "env": { "GOOGLE_ACCESS_TOKEN": "ya29...." }
    }
  }
}

Docker

docker run -i -e GOOGLE_ACCESS_TOKEN ghcr.io/cloudcorprecords/sheetport

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!