web app—options that cost money he didn't want to spend [3].
Ensure "Who has access" is set to Anyone . Create a basic server-side script to fetch the web app URL.
Create a custom CSS cosmetic filter or user script for the ://google.com domain.
: Host a simple HTML file on a service like GitHub Pages and use an iframe to display your script.
To help choose the best solution for your project, please let me know: Is your app for or public users ? Do you have access to a custom domain or web hosting ? web app—options that cost money he didn't want
Method 3: Transition to an API-Driven Architecture (Advanced)
Have you successfully removed the banner? Still stuck? Drop a comment below – I help people migrate scripts to Workspace accounts regularly.
: Ensure you set HtmlService.XFrameOptionsMode.ALLOWALL in your script's doGet() function to allow it to be framed by external sites. 2. Deploy Within a Google Site
There are several reasons why you may want to remove this message: Create a custom CSS cosmetic filter or user
This warning appears because Google cannot verify the safety of the script if it was created by a standard Google account (Gmail) rather than a verified Google Workspace business account. It serves as a security measure, alerting users that the application comes from an unverified third-party source. As Google's official documentation explains, "If your script uses sensitive OAuth scopes and hasn't been verified by Google, users outside your domain will see an unverified app screen when they try to authorize it."
Under , select "Anyone within [Your Domain]" or "Only myself" .
If you're an administrator or have ownership of a Google Apps Script project created by another user, you can delete it by following these steps:
The most reliable way to hide the banner for free is to embed your script's URL into a Google Site. When the web app is viewed through an iframe on a Google-hosted site, the warning banner is typically suppressed. Do you have access to a custom domain or web hosting
If you want to completely remove the message and not replace it with a custom title, you can use the following approach:
For those who want to automate this process, a GitHub user created a script to remove third-party apps with account access programmatically, though manual removal is recommended for most users.
In this setup, you host your HTML, CSS, and JavaScript files on a free hosting provider (like GitHub Pages, Netlify, or Vercel) and use standard JavaScript fetch() requests to send and receive data from your Apps Script. Step 1: Configure Your Apps Script as an API