# @a1-x-tech/mcp-google-slides MCP server for the Google Slides API — create and edit presentations, slides, text, shapes, tables and images, manage speaker notes, comments, thumbnails and export. For Claude, Cursor, Codex and other AI clients. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.2.0 - **Author:** gistrec - **License:** MIT - **npm:** @a1-x-tech/mcp-google-slides - **Source:** https://github.com/A1-x-Tech/mcp-google-slides - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-21T10:39:25.160Z - **Version scanned:** 0.2.0 - **CVEs:** none found by OSV at scan time ## Tools 26 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `manage_comments` - `create_shape` - `create_image` - `replace_image` — Swaps the bitmap of an existing image element while keeping its frame, position and effects (batchUpdate replaceImage). The new picture comes from image_url or - `update_transform` - `get_thumbnail` - `export_presentation` — Downloads the whole presentation as pdf, pptx, odp or txt (txt = all text incl. speaker notes) and saves it to output_path, overwriting an existing file. Served - `get_speaker_notes` — Returns a slide's speaker notes as plain text, plus the speakerNotesObjectId (the text shape on the slide's hidden notes page). The lookup fetches the slide's n - `set_speaker_notes` — Replaces a slide's speaker notes with the given text (empty string clears them). The tool resolves the slide's speakerNotesObjectId internally and rewrites that - `create_presentation` — Creates a new Google Slides presentation and returns it (presentationId, revisionId, pageSize, the initial title slide with its object ids, layouts and masters) - `get_presentation` — Returns the raw presentation JSON: slides[] with every page element (shapes, text runs, tables, images), layouts[], masters[], notesMaster, pageSize (EMU: 1 pt - `list_slides` - `get_page` — Returns one page in full by its object id — works for slides, layouts, masters and notes pages alike. For a slide the response includes slideProperties.notesPag - `batch_update` - `raw_request` - `add_slide` — Adds a slide (batchUpdate createSlide) and returns the new slide's objectId in the reply. Pick the look with either predefined_layout (BLANK, TITLE, TITLE_AND_B - `duplicate_slide` — Duplicates a slide (batchUpdate duplicateObject) — the copy, with all its elements and speaker notes, lands immediately after the original and its new objectId - `move_slides` — Moves one or more slides to a new position (batchUpdate updateSlidesPosition). slide_object_ids must appear in their current deck order with no duplicates; inse - `delete_object` — Deletes a slide or a page element (shape, image, table, video, line, group) by object id — batchUpdate deleteObject. Deleting a slide removes all its elements a - `list_layouts` — Lists the presentation's theme building blocks: layouts[] (objectId, name like TITLE_AND_BODY, displayName, masterObjectId), masters[] and the notesMasterObject - `create_table` — Creates an empty rows x columns table on a slide (batchUpdate createTable) and returns its objectId in the reply. Fill cells with set_text / insert_text using r - `edit_table` - `insert_text` — Inserts text into a shape or a table cell (batchUpdate insertText) at a 0-based character index (default 0 = the beginning). For a table cell pass row_index + c - `set_text` — Replaces the ENTIRE text of a shape or table cell: one atomic batch of deleteText(ALL) + insertText. If the target has no text yet the delete is skipped automat - `replace_text` - `update_text_style` ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp-google-slides\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@a1-x-tech/mcp-google-slides\"\n ],\n \"env\": {\n \"GOOGLE_SLIDES_CLIENT_SECRET\": \"\",\n \"GOOGLE_SLIDES_REFRESH_TOKEN\": \"\",\n \"GOOGLE_SLIDES_ACCESS_TOKEN\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `GOOGLE_SLIDES_CLIENT_SECRET` — Google Slides Client Secret (optional) - `GOOGLE_SLIDES_REFRESH_TOKEN` — Google Slides Refresh Token (optional) - `GOOGLE_SLIDES_ACCESS_TOKEN` — Google Slides Access Token (optional) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 3 credentials (0 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Critical blast radius — deletes data; holds an oauth grant. - Floor 62, ceiling 62 (tier: critical) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40a1-x-tech%2Fmcp-google-slides - Install plan: https://forgeregistry.com/api/v1/packages/%40a1-x-tech%2Fmcp-google-slides/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40a1-x-tech%2Fmcp-google-slides - HTML page: https://forgeregistry.com/registry/%40a1-x-tech%2Fmcp-google-slides - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.