Skip to main content

Set up the Smartsheet MCP server

Smartsheet's MCP server lets AI agents read and update sheets, search workspaces, manage folders, and create discussions. This guide covers generating a Smartsheet access token and connecting Smartsheet's hosted MCP server to MintMCP.

Prerequisites​

  • A MintMCP admin account
  • A Smartsheet account on a Business or Enterprise plan (required for API access)

Generate a Smartsheet access token​

  1. In Smartsheet, click your profile icon in the bottom-left navigation bar and select Personal Settings.
  2. Click the API Access tab.
  3. Click Generate new access token.
  4. Enter a name for the token — something like "MintMCP" — and click OK.
  5. Copy the token value immediately. It's only shown once.

Add Smartsheet to MintMCP​

  1. In MintMCP, go to MCP store > Manage store.
  2. Click + Add an MCP to your registry → Connect to an MCP by URL.
  3. Paste this configuration:
{
  "mcpServers": {
    "smartsheet-mcp": {
      "httpUrl": "https://mcp.smartsheet.com",
      "headers": {
        "Authorization": "Bearer ${SMARTSHEET_API_TOKEN}"
      }
    }
  }
}
  1. When prompted for the SMARTSHEET_API_TOKEN value, paste the access token you generated.
  2. Click Create.

Security considerations​

  • Smartsheet personal access tokens inherit the full permissions of the user who generated them — there are no granular scopes. Use a dedicated service account whose access matches what agents should be able to do.
  • The token gives access to every sheet, workspace, folder, and dashboard the generating user can see. Store it as an environment variable secret and never share it.
  • Smartsheet's MCP server processes untrusted cell data, which can contain prompt injection attempts. Review what agents do with write access, especially for update_rows and add_rows.

Next steps​