Security and permissions
13/20
clasp is a command-line tool maintained in Google's own GitHub org for local Apps Script development, with an experimental clasp mcp subcommand exposing it over STDIO to coding agents using the CLI's existing credentials. It covers project push/pull, deployments, versions, logs, and API management, but the MCP tool surface is limited and still evolving, OAuth scopes are broad, and push performs a full overwrite of the remote project — credentials and push operations should be handled carefully.
Read the FMRS scoring method →