Smartsheet
Connect Smartsheet to find sheets, read and update rows, add comments and files, run reports and dashboards, and share work across your workspaces.
You paste one value into PopMCP: a Smartsheet API access token, generated in Smartsheet under Account, Personal settings, API access. PopMCP finds your region (US, Europe, Australia or Gov) by itself.
Paid plan required before this connector works
No one reviews you, but Smartsheet restricts its API to Business and Enterprise plans (Advanced Work Management includes it too). Pro accounts cannot use the API, so a token from them does not work.
- Typical wait
- None. On an eligible plan the token is generated and works in under a minute.
- Cost
- Per smartsheet.com/pricing: Business is $19 per member a month billed yearly or $24 billed monthly; Enterprise and Advanced Work Management are priced by sales. Pro ($9 yearly, $12 monthly) does not include the API. A 30-day free trial needs no card.
- Blocked until approved
- Everything. Without a Business or Enterprise plan Smartsheet refuses API calls, so the connection cannot be made.
- Works meanwhile
- Start the 30-day free trial and generate a token right away; you can connect and try every tool before deciding on a plan.
Where to apply: No form. Make sure the account is on Business or Enterprise, then in Smartsheet select Account (bottom left), Personal settings, API access, Generate new access token, and copy the token (it is shown once).
- Smartsheet in Europe, Australia and Smartsheet Gov are separate instances with separate tokens. PopMCP finds the right one by itself; a token only works in the region that issued it.
- A System Admin can turn API access off for users or set tokens to expire (Admin Center), which makes a working connection start failing with 401.
- A token carries everything its user can do, including deleting sheets they own. Keep the connection read-only in PopMCP unless the AI should make changes.
- Event Reporting (activity logs) is a paid add-on for Enterprise and Advanced Work Management and needs a System Admin; without it list_events answers 403.
- Setup time
- 2 min
- Auth
- API credentials
- API base URL
- https://api.smartsheet.com/2.0
- Rate limits
- 300 requests a minute per API token. Posting a file attachment and reading cell history count 10 times each, so they are limited to 30 a minute. Over a limit Smartsheet answers 429 with errorCode 4003. One add or update request carries up to 500 rows.
Before you begin
- A Smartsheet account on a Business or Enterprise plan (or Advanced Work Management). Smartsheet does not allow API access on Pro
- API access turned on for your user. It is on by default; a System Admin can turn it off in Admin Center
- The sheets, reports and workspaces you want the AI to use must be shared with your user. A token reaches exactly what you can open
Get your credentials
Sign in to Smartsheet
Sign in to Smartsheet as the user whose sheets the AI should work with. If your company uses Smartsheet in Europe (app.smartsheet.eu), Australia (app.smartsheet.au) or Smartsheet Gov, sign in there: tokens only work in the region that issued them, and PopMCP finds the region for you.
Open Personal settings, then API access
At the bottom of the left navigation bar select Account (your profile picture), then Personal settings. In the window that opens, select the API access tab.
Personal settings
Profile, settings, notifications and API access for your Smartsheet user.
| Manage API Access Tokens | Created | |
|---|---|---|
| Reporting scriptAPI access token | Mar 4, 2026 | Revoke |
Revoke a token here at any time; anything using it stops working at once.
Generate a token named PopMCP
Select Generate new access token, name it PopMCP so you can recognise and revoke it later, and select OK.
API access
Generate a token for an app or script to use the Smartsheet API as you.
Copy the token right away
Smartsheet shows the token once. Copy it now and keep it somewhere safe until you have pasted it into PopMCP, then select OK. The new token appears by name under Manage API Access Tokens. If you lose it, generate another one.
API access
Generate a token for an app or script to use the Smartsheet API as you.
Paste the token into PopMCP
In PopMCP, paste the token into API access token and connect. PopMCP tries it on Smartsheet's US, Europe, Australia and Gov servers, keeps the region that accepts it, and reads your name and email to label the connection.
Connect in PopMCP
Open your workspace, choose Smartsheet in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| API access tokensecret | In Smartsheet: Account (your picture, bottom left), Personal settings, API access, Generate new access token. Name it PopMCP, then copy it right away: Smartsheet shows it only once. Works for Smartsheet in the US, Europe, Australia and Gov.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against Smartsheet immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP marks the Smartsheet connection Verified under your name and email, and notes your region (for example Smartsheet Regions Europe). Asking the AI to find a sheet by name returns its id, and asking for its overdue rows reads them by column name.
Troubleshooting
"Smartsheet did not accept this API access token in any region (US, Europe, Australia or Gov)."
Why: The token was copied incompletely, has extra text around it, was revoked, or expired under an admin's token expiry rule.
Fix: Generate a new token under **Account**, **Personal settings**, **API access** and paste only the token itself.
"Smartsheet only allows API access on Business and Enterprise plans"
Why: The account is on Pro, which does not include the Smartsheet API.
Fix: Use an account on Business or Enterprise, or start a free trial of one of those plans.
"Smartsheet says this account must sign in with single sign-on"
Why: Your organization requires single sign-on and has not allowed API access for your user.
Fix: Ask your Smartsheet System Admin to allow API access for your account, then generate a new token.
"Smartsheet accepted the token but refused to read your profile."
Why: A System Admin turned off API access for your user or your organization.
Fix: Ask your System Admin to turn API access back on in Admin Center, then connect again.
Tools fail with 429
Why: Smartsheet allows 300 requests a minute per token, and 30 a minute for file uploads and cell history.
Fix: Wait a minute and retry. PopMCP already retries a rate-limited call once Smartsheet says when.
Search does not find a sheet you just made
Why: Smartsheet's search index can take a while to include new items, and longer for an account that has not used the API lately.
Fix: Ask the AI to use smartsheet_find, which falls back to listing your sheets, reports, dashboards and workspaces by name.