Rockhopper

One tool can, and it is the one to watch. discard_changes throws away every uncommitted edit in a live workbook and reverts it to the last committed version, which rewrites what a person sees when they next open the file. No tool writes an individual cell or formula. Rockhopper preserves discarded edits in version history as a snapshot, so the data survives even though the live file does not.

It depends on your token, so no single number is right. Anthropic's directory lists 16 and Rockhopper's docs table the same 16. The published npm source registers 22, and Rockhopper's own changelog states a read-only token that once saw 16 tools now sees 7. Four write families gate the rest, so the surface is decided at sign-in.

One tool deletes a stored credential. disconnect_microsoft removes the Microsoft grant Rockhopper holds for you, and it sits on the read floor every token gets rather than behind a write scope. Rockhopper requires an interactive login for it, so a personal access token cannot sever a connection it did not create. It appears in neither the directory nor the docs table.

Two, and they draw a real line. Rockhopper's RFC 9728 resource descriptor advertised read-only and read-write on 2026-08-23, and its authorization server advertises the same pair. read-only lists files and reads history; read-write adds comments, reviews, versions and renames. The boundary separates reading from writing but not the routine write from the irreversible one.

Yes, through a parameter rather than a verb. enroll_file takes share_with, and the value team fans the workbook out to every member of your first team, minus you. Rockhopper's source instructs the model to ask the user every time and to refuse to enroll when the value is omitted. No tool name suggests sharing, so a verb census misses this path entirely.

Change history, comments and review records, not cell contents at large. Tools return which cells changed with old and new values, comment text with authors, and reviewer assignments. Rockhopper's data governance page states it does not index, search or analyze file contents beyond change tracking. Comment text is written by colleagues, so treat it as untrusted input.

For reading yes, for adding files no. Rockhopper's directory description and product docs cover both Microsoft Excel and Google Sheets as enrolled file types. But the enroll_file tool in the published source is Microsoft-only — its description states Google Sheets and Drive links are refused, and only SharePoint and OneDrive addresses resolve. Enroll a Sheet from the web app instead.

Yes, two separate ones. Rockhopper documents personal access tokens as throttled to 120 requests per minute by default, surfaced as a too-many-requests error. Separately the published source caps OneDrive and SharePoint discovery at 20 searches per session, and its own refusal text states this is a fixed limit that waiting does not restore.

No. Rockhopper documents that its hosted gateway mints a short-lived personal access token per session, defaulting to 30 minutes, and rotates it automatically. Long-lived tokens never leave Rockhopper's infrastructure. There is no refresh token and no revocation endpoint yet, so an expired session means repeating the sign-in flow.