Centinel AnalyticaCentinel Analytica

Google Apps Script

Google-Apps-Script is the default user agent sent when a script on Google's Apps Script platform calls UrlFetchApp to retrieve a URL. The requests are executed by Google infrastructure on behalf of arbitrary third-party script authors, so this token represents many unrelated automations rather than one operator's crawler, and the id value in the user agent identifies the calling script rather than a purpose. Google publishes a general list of Google-owned IP ranges that these requests originate from, and its verification documentation directs publishers to match Apps Script requests against that IP list rather than by reverse DNS. There is no reverse DNS hostname on a zone dedicated to this fetcher, and the intent behind any individual request cannot be determined from the user agent alone.

At a glance

How Centinel checks it

  • User agent: The request calls itself this crawler. Anyone can send the same string.

Google Apps Script publishes nothing Centinel can check a source against, so a match reports the name and leaves the source unconfirmed. The match tokens, verification domains, and address feeds are not published here.

Allowing or blocking it

The crawler object in the /validate response sets access_allowed to true only for a verified source that your tenant allowlists. A policy rule can allow or block this crawler by its category, Other.

Back to the crawler catalog