Spreadsheet Security, Scoped OAuth Onboarding & AI Connector Governance
MCP Connector Setup: No Demo Edits & Credit Non-Transfer Audit
Audit Scoped OAuth Onboarding Rules for the Arte Sheets ChatGPT Connector (0.1.0, In review / Not published): Read-Only Setup Discovery via list_workbooks and list_lessons, Zero Speculative Demo Edits or Invitations, Neutral Access-Denial Reporting, and Zero ChatGPT Credit Transfer.
Verify connector onboarding with read-only discovery—never mutate sheets or claim credit transfers!
When documenting onboarding checklists for the Arte Sheets ChatGPT plugin (version 0.1.0, currently In review / Not published—do not promise public installation, approval, or in-plugin checkout), teams should encode four strict setup boundaries in a governance table! First, authentication occurs strictly through the host’s OAuth connection (never ask for passwords, API keys, or tokens in chat, and remind users they can revoke grants anytime under Arte Sheets Profile -> Connected apps). Second, setup discovery uses read-only `list_workbooks` (following cursor pagination beyond page 1) or `list_lessons`—never make cell edits or send workbook invitations just to demonstrate setup! Third, local browser-only sheets are invisible to the connector until saved to the user’s Arte account with collaboration enabled; never pretend a local sheet was uploaded.
Fourth, the connection inherits the account’s existing permissions and plan: report plan or role access denials neutrally because the plugin does not sell plans or credits, and ChatGPT usage credits NEVER transfer to Arte Sheets or its metered in-app Pro Realtime voice/chat assistant! Verify in the governance audit grid—Host_OAuth_Connected = 1 (B2), Cloud_Collab_Saved = 1 (B3), Speculative_Demo_Edit_Or_Invite = 0 (B4), and Account_Plan_Role_Authorized = 1 (B5): Setup Action Gate returns "Allowed: Read-Only Discovery (list_workbooks / list_lessons)" (E2), Denial Boundary confirms "Neutral Denial Only: Plugin Does Not Sell Plans or Credits" (E3), Transferable ChatGPT Credits to Arte equals 0 (E4), and Revocation Control reports "Revoke Anytime in Profile -> Connected apps" (E5)!
| MCP Setup Governance Check (0.1.0 In Review / Not Published) | Rule Formula | Verified Output |
|---|---|---|
| Setup Discovery Action Gate | OAuth=1 & DemoMut=0 & Cloud=1 & Auth=1 | Allowed: Read-Only Discovery (list_workbooks / list_lessons) |
| Billing & Denial Boundary | Neutral reporting; no plugin checkout | Neutral Denial Only: Plugin Does Not Sell Plans or Credits |
| Transferable ChatGPT Credits | Zero cross-platform credit transfer | 0 |
| OAuth Revocation Control | Self-service grant management path | Revoke Anytime in Profile -> Connected apps |
Connector Setup Guardrail Decision Formula
Validate binary `{0, 1}` flags across all four setup state inputs (`B2:B5`) before evaluating onboarding readiness!
=IF(OR(NOT(OR(B2=0,B2=1)), NOT(OR(B3=0,B3=1)), NOT(OR(B4=0,B4=1)), NOT(OR(B5=0,B5=1))), "Invalid Setup Flag", IF(B2 = 0, "Reconnect via Host OAuth (Never Ask Passwords/Tokens)", IF(B4 = 1, "Reject: Never Edit or Invite Just to Demo Setup", IF(B3 = 0, "Local Sheet Unavailable: Save to Account & Enable Collab", IF(B5 = 0, "Report Access Denial Neutrally (No Plugin Plan Sales)", "Allowed: Read-Only Discovery (list_workbooks / list_lessons)")))))Demo-Mutation, Local-Sheet, Plan-Denial & Disconnected-OAuth Stress Checks
Toggle each violation flag independently: setting Speculative_Demo_Edit_Or_Invite B4 = 1 immediately blocks setup with "Reject: Never Edit or Invite Just to Demo Setup"; restoring B4 = 0 with B3 = 0 flags "Local Sheet Unavailable: Save to Account & Enable Collab"; restoring B3 = 1 with B5 = 0 returns "Report Access Denial Neutrally (No Plugin Plan Sales)"; and setting B2 = 0 returns "Reconnect via Host OAuth (Never Ask Passwords/Tokens)"!
=IF(E2 = "Invalid Setup Flag", E2, 0)Try the example
Use the original values or change them to test your understanding.