Skip to main content
Glama

Sheets Enable Public Access

sheets_enable_public_access
Destructive

Enable public, unauthenticated read access to a sheet.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
sheetIdYes
idempotencyKeyYesStable key for one logical mutation. Reuse the identical key and payload after an ambiguous outcome; different work or batches need different keys. Inspect receipts or live state before retrying.
expectedAclVersionYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
slugYes
aclVersionYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag destructiveHint=true, readOnlyHint=false, idempotentHint=false, openWorldHint=true, so the mutation risk is largely covered elsewhere, and the description is consistent with them ('Enable' is a write). It adds real context by specifying the exposure is public and unauthenticated, but omits what the agent most needs beyond annotations: that the change is reversible only via a separate revoke tool, that an expectedAclVersion mismatch aborts the write, and that annotation idempotentHint=false is mitigated by the idempotencyKey parameter.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One short, front-loaded sentence with zero filler; the scope qualifier ('public, unauthenticated read') arrives immediately. It is efficient rather than padded, though that economy is also the source of its under-specification.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value explanation is not required, but for a destructive, non-idempotent, world-visible ACL mutation with three required parameters and 33% schema coverage, the description is far too thin: no concurrency semantics for expectedAclVersion, no reversal path, no note on who gains access or how to audit it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 33% — just idempotencyKey is documented — and the description adds nothing at all about parameters. sheetId and expectedAclVersion are unexplained in both places, leaving the optimistic-concurrency contract (the acl version token) entirely invisible to the caller.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource+scope: 'Enable public, unauthenticated read access to a sheet.' An agent can infer this differs from sheets_set_team_access or sheets_share_with_email by the 'public/unauthenticated' qualifier. It stops short of naming those siblings explicitly, which keeps it from a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use, when-not-to-use, or alternative guidance is given. It never mentions the counter-operation (sheets_revoke_publication) or which sharing tool to pick when the audience is a team or a named person. Nor does it state prerequisites such as ownership or admin rights needed to loosen a sheet's ACL.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources