smartsheet-mcp
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@smartsheet-mcplist all my sheets"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
smartsheet-mcp
A Model Context Protocol server that exposes Smartsheet read APIs as MCP tools, so you can browse and query Smartsheet data from any MCP-compatible client (for example, Kiro).
Status: read-only, 66 tools covering the Smartsheet read surface. Write operations (add/update/delete rows, create sheets, register webhooks, etc.) are not implemented — this server is intentionally safe for exploration and reporting workflows.
Quick start
Get a Smartsheet API access token — see Getting an API key.
Install the server — see Install.
Configure it — export
SMARTSHEET_ACCESS_TOKENor put it in a.envfile.Register with your MCP client — see Register with Kiro.
Related MCP server: TrustLayer MCP Server
Getting an API key
The Smartsheet API uses a bearer access token.
Requirement: your Smartsheet account must be on a Business or Enterprise plan. Free / Pro plans cannot access the public API.
Sign in to Smartsheet.
In the bottom-left corner, click Account → Personal Settings.
Open the API Access tab.
Click Generate new access token, give it a descriptive name, and confirm.
Copy the token immediately — Smartsheet will only show it to you once.
Store it somewhere safe (a password manager or secret store). You will paste it into an environment variable or
.envfile, not into source control.
Smartsheet's own walkthrough, with screenshots: https://help.smartsheet.com/articles/2482389-generate-API-key.
Regional endpoints
If your Smartsheet account lives outside the US, override the base URL:
Region | Base URL |
US (default) |
|
EU |
|
Australia |
|
Set it with SMARTSHEET_API_BASE_URL.
Rotating or revoking a token
If a token is leaked (committed to git, pasted in a chat, etc.) revoke it immediately:
Return to Account → Personal Settings → API Access.
Click the ⋯ menu next to the token and choose Revoke.
Generate a new one and update every place that uses it.
Install
Requires Python 3.10+.
Option 1 — install from PyPI (recommended for end users)
pip install smartsheet-mcpOr with pipx to keep it isolated:
pipx install smartsheet-mcpEither way, the smartsheet-mcp command is now on your PATH.
Option 2 — editable install from source (for contributors)
git clone https://github.com/Kcrong/smartsheet-mcp.git
cd smartsheet-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install -e .Option 3 — with uv
# Run without installing, one-off
uvx smartsheet-mcp --version
# Or develop from source
git clone https://github.com/Kcrong/smartsheet-mcp.git
cd smartsheet-mcp
uv venv
source .venv/bin/activate
uv pip install -e .After install, smartsheet-mcp is on your PATH and
python -m smartsheet_mcp works too.
Configure
The server reads all configuration from environment variables.
Variable | Required | Default | Notes |
| ✅ | — | Bearer token from the steps above |
| ❌ |
| Override for EU/AU regions |
| ❌ |
| HTTP timeout in seconds |
| ❌ |
|
|
Option A — environment variable
export SMARTSHEET_ACCESS_TOKEN="paste-your-token-here"
smartsheet-mcpOption B — .env file (good for local development)
Copy the template and fill it in:
cp .env.example .env
# edit .env and set SMARTSHEET_ACCESS_TOKEN.env is already listed in .gitignore.
Smoke test
smartsheet-mcp --help
smartsheet-mcp --version
# Start the server (stdio; it will wait for MCP messages from a client)
SMARTSHEET_ACCESS_TOKEN=... smartsheet-mcp
# Ctrl+C to stop.An end-to-end check against a real token:
# Print a few sample rows from one accessible sheet
SMARTSHEET_ACCESS_TOKEN=... python scripts/show_sheet_sample.py
# Call every registered tool (read-only)
SMARTSHEET_ACCESS_TOKEN=... python scripts/live_read_all.pyRegister with Kiro
Kiro reads MCP server configuration from either:
Project-local:
.kiro/settings/mcp.json(checked into your project, but this file is gitignored in this repo to avoid leaking tokens), orGlobal:
~/.kiro/settings/mcp.json(recommended for personal tokens).
This repo ships .kiro/settings/mcp.example.json as a starting point. Copy
it and fill in the real values:
cp .kiro/settings/mcp.example.json .kiro/settings/mcp.json
# edit .kiro/settings/mcp.jsonMinimal example entry (point command at the interpreter inside your venv):
{
"mcpServers": {
"smartsheet": {
"command": "/absolute/path/to/smartsheet-mcp/.venv/bin/python",
"args": ["-m", "smartsheet_mcp"],
"env": {
"SMARTSHEET_ACCESS_TOKEN": "paste-your-token-here"
},
"timeout": 120000
}
}
}If you installed the project so that smartsheet-mcp is on Kiro's PATH:
{
"mcpServers": {
"smartsheet": {
"command": "smartsheet-mcp",
"env": {
"SMARTSHEET_ACCESS_TOKEN": "paste-your-token-here"
},
"timeout": 120000
}
}
}Restart Kiro (or reload MCP servers) after editing the config. Confirm the
server is live by asking Kiro to call smartsheet_get_user_me or
smartsheet_list_sheets.
Security notes for the config file
Never commit
.kiro/settings/mcp.json. It is already in.gitignore; keep it that way.Prefer Kiro's global config (
~/.kiro/settings/mcp.json) for personal tokens so they never appear inside a project checkout.For shared/CI use, consider an OAuth-issued service token on a dedicated Smartsheet account rather than a developer's personal token.
Available tools (66)
All tools are prefixed smartsheet_.
Meta
Tool | Endpoint |
|
|
|
|
Sheets, columns, rows, cells
Tool | Endpoint |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Sheet summary
Tool | Endpoint |
|
|
|
|
Search
Tool | Endpoint |
|
|
|
|
Workspaces
Tool | Endpoint |
|
|
|
|
|
|
|
|
Folders
Tool | Endpoint |
|
|
|
|
|
|
|
|
Reports
Tool | Endpoint |
|
|
|
|
|
|
Dashboards (Sights)
Tool | Endpoint |
|
|
|
|
|
|
Discussions & comments
Tool | Endpoint |
|
|
|
|
|
|
|
|
|
|
Attachments
Tool | Endpoint |
|
|
|
|
|
|
|
|
|
|
Users, groups, contacts, alternate emails
Tool | Endpoint |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Sharing
Tool | Endpoint |
|
|
|
|
Automation & cross-sheet references
Tool | Endpoint |
|
|
|
|
|
|
|
|
Update requests
Tool | Endpoint |
|
|
|
|
|
|
|
|
Webhooks & proofs
Tool | Endpoint |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Templates & favorites
Tool | Endpoint |
|
|
|
|
|
|
|
|
Project layout
smartsheet-mcp/
├── pyproject.toml
├── README.md
├── CHANGELOG.md
├── CONTRIBUTING.md
├── LICENSE
├── .env.example
├── .gitignore
├── .kiro/settings/mcp.example.json # template; the real mcp.json is gitignored
├── scripts/
│ ├── live_read_all.py # calls every tool with a real token
│ └── show_sheet_sample.py # prints a sample sheet as a table
└── src/smartsheet_mcp/
├── __init__.py
├── __main__.py # python -m smartsheet_mcp
├── server.py # MCP stdio server
├── client.py # Async Smartsheet HTTP client (httpx)
├── config.py # Env-var settings
├── errors.py # Typed exceptions
└── tools/
├── __init__.py # Tool catalog + dispatcher (66 tools)
├── _common.py
├── meta.py
├── sheets.py
├── cells.py
├── summary.py
├── search.py
├── workspaces.py
├── folders.py
├── structure.py # metadata/children/version/publish/in-sheet search
├── reports.py
├── dashboards.py
├── discussions.py
├── attachments.py
├── users.py
├── sharing.py
├── automation.py
├── cross_sheet.py
├── update_requests.py
├── webhooks.py
├── proofs.py
└── extras.py # templates, favoritesTroubleshooting
Symptom | Likely cause |
| Export the variable or create |
HTTP 401 on every call | Token is invalid, revoked, or from the wrong region. Verify in the Smartsheet UI. |
HTTP 403 errorCode 1004 | Your plan does not include this feature (e.g. Events Reporting is Enterprise-only). |
HTTP 400 errorCode 2238 on |
|
Kiro doesn't see the server | Check |
Roadmap
Write operations are deliberately out of scope for v0.x. Candidate follow-ups:
Write tools: add/update/delete rows, update cells.
Sheet create/copy/move/delete, column add/update/delete.
Attachments upload/delete/download binary.
Discussions/comments create/update/delete.
Webhooks register/enable/delete, event callbacks.
Automation rules / update requests create & modify.
list_eventsonce a test account with the premium add-on is available.Recorded API fixtures + automated pytest suite.
License
MIT.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Kcrong/smartsheet-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server