Skip to main content

Set up the Smartsheet MCP server

Smartsheet's MCP server lets AI agents read and update sheets, search workspaces, manage folders, and create discussions. This guide covers connecting Smartsheet's hosted MCP server to MintMCP, where each user authenticates with their own Smartsheet access token.

Prerequisites​

  • A MintMCP admin account
  • A Smartsheet account on a Business or Enterprise plan (required for API access)

Add Smartsheet to MintMCP​

  1. In MintMCP, go to MCP store > Manage store.
  2. Click + Add an MCP to your registry → Connect to an MCP by URL.
  3. Enter https://mcp.smartsheet.com as the server URL.
  4. Set Connection type to Per user credentials.
  5. Set Authorization method to Bearer token.
  6. Click Create.

Once deployed, each user must generate their own Smartsheet access token before connecting.

Generate a Smartsheet access token​

Each user who wants to access Smartsheet through MintMCP must generate their own personal access token:

  1. In Smartsheet, click your profile icon in the bottom-left navigation bar and select Personal Settings.
  2. Click the API Access tab.
  3. Click Generate new access token.
  4. Enter a name for the token — something like "MintMCP" — and click OK.
  5. Copy the token value immediately. It's only shown once.

Enter this token when MintMCP prompts for a bearer token.

Security considerations​

  • Each user authenticates with their own token, so AI agent actions are tied to their individual Smartsheet identity and permissions.
  • Smartsheet personal access tokens inherit the full permissions of the generating user — there are no granular scopes.
  • Smartsheet's MCP server processes untrusted cell data, which can contain prompt injection attempts. Review what agents do with write access, especially for update_rows and add_rows.

Next steps​