Open-source MCP server
Connect Claude to your Google Sheets in 60 seconds.
One-click OAuth, no local install. Lets any MCP-compatible host read, write, and format your spreadsheets — autofit columns, freeze headers, color rows, share with teammates, all from a conversation.
We never store your sheet data. Only an OAuth refresh token, encrypted at rest, so the connector can act on your behalf.
How it works
-
1
Click "Connect with Google"
Standard Google consent screen. You grant access to Sheets + Drive. We capture an offline refresh token, encrypt it with AES-256-GCM, and mint a personal MCP bearer token for you.
-
2
Paste the install command
One
claude mcp addcommand, pre-filled with your token, ready to copy. Works in Claude Code, Claude Desktop, Cursor, Continue.dev — anything that speaks MCP. -
3
Talk to your Sheets
Just ask. Examples:
- "Find my expense tracker and add a row for today: groceries, 42.50."
- "Beautify the Q3 roadmap tab — autofit columns, freeze the header, wrap text."
- "Share the team OKRs sheet with [email protected] as a commenter."
13 tools, ready to call
list_sheetsSearch Drive by name.
get_sheet_metadataTabs + grid sizes.
read_rangeRead an A1 range.
write_rangeOverwrite cells.
append_rowsInsert at bottom.
beautifyHeader + freeze + autofit in one call.
format_header_rowBold + gray + freeze row 1.
autofit_columnsFit columns to content.
freeze_rowsFreeze top N.
wrap_textWrap on a range.
set_background_colorRGB tint a range.
add_sheet_tabNew tab.
create_spreadsheetNew empty spreadsheet.
share_with_emailReader / commenter / writer.
Security model
- • Google refresh tokens are encrypted with AES-256-GCM before being written to Mongo. Key lives in env, never in the database.
- • MCP bearer tokens are stored as sha256 hashes only — the plaintext is shown once on connect, then unrecoverable.
- • Per-request OAuth client is built from the decrypted refresh token, used for that single call, then discarded.
- • Revoke at any time — server-side revocation is instant.
- • Code is open-source on GitHub; self-host if you'd rather not trust a hosted service.