Smartsheet setup guide

Agents keep projects moving: they read, create and update tasks and issues where your team works.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Smartsheet, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Smartsheet can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

API access token

API key.

1. Sign in to Smartsheet as the user the agent should act as. API access needs a Business or Enterprise plan.
2. At the bottom of the left navigation bar select your Account (profile image) > Personal Settings > API Access, then Generate new access token. Copy it now; it is shown only once.
3. Pick the region your Smartsheet account lives in and paste the token into the form.

Field	What to enter
Smartsheet region (optional)	Choice: United States (app.smartsheet.com), Europe (app.smartsheet.eu), Australia (app.smartsheet.au), Smartsheet Gov. Starts as https://api.smartsheet.com/2.0.
API access token	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Smartsheet until you delete or rotate it there.

Your Smartsheet app (US region)

Your OAuth app.

This way signs in with an OAuth app you create for Smartsheet, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. In Smartsheet create a developer profile, then open Account > Developer Tools and choose Create New App.
2. Set the app redirect URL to https://everdeck.io/api/oauth/callback.
3. Copy the app client id and app secret into the form, then approve access. Accounts in the EU, AU or Gov regions should use the API access token option.

The scopes Everdeck asks for:

• READ_SHEETS
• WRITE_SHEETS
• ADMIN_WEBHOOKS

When you disconnect, Everdeck asks Smartsheet to revoke the sign-in, then deletes the tokens it saved.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• List sheetsTier 0 · ReadReads outside contentsmartsheet_list_sheets

  List the sheets you can access, optionally only those changed since a time.

• Search everythingTier 0 · ReadReads outside contentsmartsheet_search

  Search all sheets you can access for text. Results include matching rows, sheets, discussions and attachments with the sheet they belong to. Wrap text in double quotes for an exact match.

• Search a sheetTier 0 · ReadReads outside contentsmartsheet_search_sheet

  Find the rows in one sheet that contain some text. objectId in each result is the row id.

• Read a sheetTier 0 · ReadReads outside contentsmartsheet_get_sheet

  Read a sheet's columns and rows (cell values with the column id they belong to). Narrow it with row_ids, column_ids or rows_modified_since, and page through large sheets.

• List columnsTier 0 · ReadReads outside contentsmartsheet_list_columns

  List a sheet's columns with ids, titles, types and dropdown options. Column ids are needed to write cells.

• Read a rowTier 0 · ReadReads outside contentsmartsheet_get_row

  Read one row with its cells and column titles.

• Add rowsTier 2 · ReversibleReads outside contentsmartsheet_add_rows

  Add one or more rows. Each row lists its cells by column id (from list_columns) and where it goes: toBottom (default), toTop, or parentId to nest it under another row.

• Update rowsTier 2 · ReversibleReads outside contentsmartsheet_update_rows

  Change cell values in existing rows. Each row needs its id and only the cells to change; other cells keep their values.

• Read row commentsTier 0 · ReadReads outside contentsmartsheet_list_row_comments

  Read the discussions on a row with their comments.

• Comment on a rowTier 2 · ReversibleReads outside contentsmartsheet_add_row_comment

  Start a discussion on a row with a comment. Everyone the sheet is shared with can read it.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Smartsheet later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Smartsheet, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.