Product
Google Cloud
Google Cloud console APIs: projects, service enablement, API keys, billing, monitoring, storage, BigQuery and IAM, plus the rest of the infrastructure, data, devops, networking, security and governance APIs.
Install
gcloud is one plugin in the google-services-mcps marketplace, and it runs one MCP server with the same name. Install it for Claude Code with the command below. For Codex, OpenCode or Antigravity, change --agent; the product id stays the same.
Install for Claude Code
npx google-services-mcps install --agent claude --plugin gcloudWhat it manages
The server carries 12 generated API bindings and 280 gateway APIs. Gateway APIs are reached through api_search, api_describe and api_call, which every product with gateway APIs lists.
| API | Version |
|---|---|
| apikeys | v2 |
| bigquery | v2 |
| cloudasset | v1 |
| cloudbilling | v1 |
| cloudprofiler | v2 |
| cloudresourcemanager | v3 |
| cloudtrace | v2 |
| iam | v2 |
| monitoring | v3 |
| policytroubleshooter | v3 |
| serviceusage | v1 |
| storage | v1 |
| API | Version |
|---|---|
| accessapproval | v1 |
| accesscontextmanager | v1 |
| advisorynotifications | v1 |
| alloydb | v1 |
| alloydb | v1alpha |
| alloydb | v1beta |
| analyticshub | v1 |
| analyticshub | v1beta1 |
| apigateway | v1 |
| apigateway | v1beta |
| apigee | v1 |
| apihub | v1 |
| apim | v1alpha |
| appengine | v1 |
| appengine | v1alpha |
| appengine | v1beta |
| apphub | v1 |
| apphub | v1alpha |
| artifactregistry | v1 |
| artifactregistry | v1beta1 |
| artifactregistry | v1beta2 |
| assuredworkloads | v1 |
| assuredworkloads | v1beta1 |
| auditmanager | v1 |
| backupdr | v1 |
| backupdr | v1beta |
| baremetalsolution | v2 |
| batch | v1 |
| beyondcorp | v1 |
| beyondcorp | v1alpha |
| biglake | v1 |
| bigqueryconnection | v1 |
| bigqueryconnection | v1beta1 |
| bigquerydatapolicy | v1 |
| bigquerydatapolicy | v2 |
| bigquerydatatransfer | v1 |
| bigqueryreservation | v1 |
| bigtableadmin | v2 |
| billingbudgets | v1 |
| billingbudgets | v1beta1 |
| binaryauthorization | v1 |
| binaryauthorization | v1beta1 |
| blockchainnodeengine | v1 |
| certificatemanager | v1 |
| cloudasset | v1beta1 |
| cloudasset | v1p1beta1 |
| cloudasset | v1p5beta1 |
| cloudasset | v1p7beta1 |
| cloudbilling | v1beta |
| cloudbuild | v1 |
| cloudbuild | v2 |
| cloudchannel | v1 |
| cloudcommerceprocurement | v1 |
| cloudcontrolspartner | v1 |
| cloudcontrolspartner | v1beta |
| clouddeploy | v1 |
| clouderrorreporting | v1beta1 |
| cloudfunctions | v1 |
| cloudfunctions | v2 |
| cloudfunctions | v2alpha |
| cloudfunctions | v2beta |
| cloudkms | v1 |
| cloudlocationfinder | v1 |
| cloudlocationfinder | v1alpha |
| cloudnumberregistry | v1alpha |
| cloudproductregistry | v1 |
| cloudquotas | v1 |
| cloudquotas | v1beta |
| cloudresourcemanager | v1 |
| cloudresourcemanager | v1beta1 |
| cloudresourcemanager | v2 |
| cloudresourcemanager | v2beta1 |
| cloudresourcemanager | v3 |
| cloudscheduler | v1 |
| cloudscheduler | v1beta1 |
| cloudshell | v1 |
| cloudsupport | v2 |
| cloudsupport | v2beta |
| cloudtasks | v2 |
| cloudtasks | v2beta2 |
| cloudtasks | v2beta3 |
| cloudtrace | v1 |
| cloudtrace | v2beta1 |
| composer | v1 |
| composer | v1beta1 |
| compute | 2026-09-01 |
| compute | 2026-10-01-preview |
| compute | 2026-11-01 |
| compute | 2026-12-01-preview |
| compute | alpha |
| compute | beta |
| compute | preview |
| compute | stable |
| compute | v1 |
| config | v1 |
| connectors | v1 |
| connectors | v2 |
| container | v1 |
| container | v1beta1 |
| containeranalysis | v1 |
| containeranalysis | v1alpha1 |
| containeranalysis | v1beta1 |
| databasecenter | v1beta |
| datacatalog | v1 |
| datacatalog | v1beta1 |
| dataflow | v1b3 |
| dataform | v1 |
| dataform | v1beta1 |
| datafusion | v1 |
| datafusion | v1beta1 |
| datalineage | v1 |
| datamigration | v1 |
| datamigration | v1beta1 |
| datapipelines | v1 |
| dataplex | v1 |
| dataproc | v1 |
| datastore | v1 |
| datastore | v1beta1 |
| datastore | v1beta3 |
| datastream | v1 |
| datastream | v1alpha1 |
| deploymentmanager | alpha |
| deploymentmanager | v2 |
| deploymentmanager | v2beta |
| developerconnect | v1 |
| discovery | v1 |
| dlp | v2 |
| dns | v1 |
| dns | v1beta2 |
| domains | v1 |
| domains | v1alpha2 |
| domains | v1beta1 |
| essentialcontacts | v1 |
| eventarc | v1 |
| file | v1 |
| file | v1beta1 |
| firestore | v1 |
| firestore | v1beta1 |
| firestore | v1beta2 |
| ftp | v1 |
| ftp | v1alpha |
| gkebackup | v1 |
| gkehub | v1 |
| gkehub | v1alpha |
| gkehub | v1beta |
| gkehub | v1beta1 |
| gkehub | v2 |
| gkehub | v2alpha |
| gkehub | v2beta |
| gkeonprem | v1 |
| healthcare | v1 |
| healthcare | v1beta1 |
| hypercomputecluster | v1 |
| iam | v1 |
| iam | v2beta |
| iamcredentials | v1 |
| iap | v1 |
| iap | v1beta1 |
| ids | v1 |
| integrations | v1 |
| integrations | v2 |
| kmsinventory | v1 |
| logging | v2 |
| looker | v1 |
| managedidentities | v1 |
| managedidentities | v1alpha1 |
| managedidentities | v1beta1 |
| managedkafka | v1 |
| memcache | v1 |
| memcache | v1beta2 |
| metastore | v1 |
| metastore | v1alpha |
| metastore | v1beta |
| migrationcenter | v1 |
| migrationcenter | v1alpha1 |
| monitoring | v1 |
| netapp | v1 |
| netapp | v1beta1 |
| networkconnectivity | v1 |
| networkconnectivity | v1alpha1 |
| networkmanagement | v1 |
| networkmanagement | v1beta1 |
| networksecurity | v1 |
| networksecurity | v1beta1 |
| networkservices | v1 |
| networkservices | v1beta1 |
| observability | v1 |
| ondemandscanning | v1 |
| ondemandscanning | v1beta1 |
| oracledatabase | v1 |
| orgpolicy | v2 |
| osconfig | v1 |
| osconfig | v1alpha |
| osconfig | v1beta |
| osconfig | v2 |
| osconfig | v2beta |
| oslogin | v1 |
| oslogin | v1alpha |
| oslogin | v1beta |
| parallelstore | v1 |
| parallelstore | v1beta |
| parametermanager | v1 |
| policyanalyzer | v1 |
| policyanalyzer | v1beta1 |
| policysimulator | v1 |
| policysimulator | v1alpha |
| policysimulator | v1beta |
| policytroubleshooter | v1 |
| policytroubleshooter | v1beta |
| policytroubleshooter | v3beta |
| privateca | v1 |
| privateca | v1beta1 |
| publicca | v1 |
| publicca | v1alpha1 |
| publicca | v1beta1 |
| pubsub | v1 |
| pubsub | v1beta1a |
| pubsub | v1beta2 |
| pubsublite | v1 |
| rapidmigrationassessment | v1 |
| recaptchaenterprise | v1 |
| recommender | v1 |
| recommender | v1beta1 |
| redis | v1 |
| redis | v1beta1 |
| run | v1 |
| run | v2 |
| runtimeconfig | v1 |
| runtimeconfig | v1beta1 |
| saasservicemgmt | v1 |
| saasservicemgmt | v1beta1 |
| sasportal | v1alpha1 |
| secretmanager | v1 |
| secretmanager | v1beta1 |
| secretmanager | v1beta2 |
| securesourcemanager | v1 |
| securitycenter | v1 |
| securitycenter | v1beta1 |
| securitycenter | v1beta2 |
| securityposture | v1 |
| serviceconsumermanagement | v1 |
| serviceconsumermanagement | v1beta1 |
| servicecontrol | v1 |
| servicecontrol | v2 |
| servicedirectory | v1 |
| servicedirectory | v1beta1 |
| servicemanagement | v1 |
| servicenetworking | v1 |
| servicenetworking | v1beta |
| serviceusage | v1beta1 |
| spanner | v1 |
| sqladmin | v1 |
| sqladmin | v1beta4 |
| storagebatchoperations | v1 |
| storagetransfer | v1 |
| sts | v1 |
| sts | v1beta |
| threatintelligence | v1beta |
| tpu | v1 |
| tpu | v1alpha1 |
| tpu | v2 |
| tpu | v2alpha1 |
| trafficdirector | v2 |
| trafficdirector | v3 |
| transcoder | v1 |
| vmmigration | v1 |
| vmmigration | v1alpha1 |
| vmwareengine | v1 |
| vpcaccess | v1 |
| vpcaccess | v1beta1 |
| websecurityscanner | v1 |
| websecurityscanner | v1alpha |
| websecurityscanner | v1beta |
| workflowexecutions | v1 |
| workflowexecutions | v1beta |
| workflows | v1 |
| workflows | v1beta |
| workloadmanager | v1 |
| workstations | v1 |
| workstations | v1beta |
Tools
The plugin's server registers 393 tools: 197 reads, 133 writes, 62 destructive actions and 1 dynamic tools. A read never asks. A write is listed only when Allow write tools is on, and asks before it runs. A destructive action asks twice. A dynamic tool decides per call.
Every tool name starts with mcp__plugin_gcloud_gcloud__, so a call traces back to this product. The table lists the tools this server registers, with the safety class from the plugin's tool map.
| Tool | Class | What it does |
|---|---|---|
| account_remove | write | Remove a signed-in account |
| account_set_default | write | Set the default account |
| accounts_list | read | Signed-in accounts |
| api_call | dynamic | Call an API method |
| api_describe | read | Describe an API method |
| api_methods | read | gcloud: API methods |
| api_search | read | Search API methods |
| apikeys_keys_create | write | apikeys.projects.locations.keys.create |
| apikeys_keys_delete | destructive | apikeys.projects.locations.keys.delete |
| apikeys_keys_get_key_string | write | apikeys.projects.locations.keys.getKeyString |
| apikeys_keys_lookup_key | read | apikeys.keys.lookupKey |
| apikeys_keys_undelete | write | apikeys.projects.locations.keys.undelete |
| apikeys_operations_get | read | apikeys.operations.get |
| apikeys_projects_locations_keys_get | read | apikeys.projects.locations.keys.get |
| apikeys_projects_locations_keys_list | read | apikeys.projects.locations.keys.list |
| apikeys_projects_locations_keys_patch | write | apikeys.projects.locations.keys.patch |
| assets_analyze_iam_policy_longrunning | read | cloudasset.analyzeIamPolicyLongrunning |
| assets_assets_list | read | cloudasset.assets.list |
| assets_feeds_create | write | cloudasset.feeds.create |
| assets_feeds_delete | destructive | cloudasset.feeds.delete |
| assets_feeds_get | read | cloudasset.feeds.get |
| assets_feeds_list | read | cloudasset.feeds.list |
| assets_feeds_patch | write | cloudasset.feeds.patch |
| assets_operations_get | read | cloudasset.operations.get |
| assets_policies_batch_get | read | cloudasset.effectiveIamPolicies.batchGet |
| assets_saved_queries_create | write | cloudasset.savedQueries.create |
| assets_saved_queries_delete | destructive | cloudasset.savedQueries.delete |
| assets_saved_queries_get | read | cloudasset.savedQueries.get |
| assets_saved_queries_list | read | cloudasset.savedQueries.list |
| assets_saved_queries_patch | write | cloudasset.savedQueries.patch |
| assets_v1_analyze_iam_policy | read | cloudasset.analyzeIamPolicy |
| assets_v1_analyze_move | read | cloudasset.analyzeMove |
| assets_v1_analyze_org_policies | read | cloudasset.analyzeOrgPolicies |
| assets_v1_batch_get_assets_history | read | cloudasset.batchGetAssetsHistory |
| assets_v1_export_assets | write | cloudasset.exportAssets |
| assets_v1_governed_assets | read | cloudasset.analyzeOrgPolicyGovernedAssets |
| assets_v1_governed_ctrs | read | cloudasset.analyzeOrgPolicyGovernedContainers |
| assets_v1_query_assets | write | cloudasset.queryAssets |
| assets_v1_search_all_iam_policies | read | cloudasset.searchAllIamPolicies |
| assets_v1_search_all_resources | read | cloudasset.searchAllResources |
| auth_login | write | Sign in to Google |
| auth_setup_client | write | Save the Google OAuth client |
| auth_status | read | Sign-in status |
| bigquery_datasets_delete | destructive | bigquery.datasets.delete |
| bigquery_datasets_get | read | bigquery.datasets.get |
| bigquery_datasets_insert | write | bigquery.datasets.insert |
| bigquery_datasets_list | read | bigquery.datasets.list |
| bigquery_datasets_patch | write | bigquery.datasets.patch |
| bigquery_datasets_undelete | write | bigquery.datasets.undelete |
| bigquery_datasets_update | write | bigquery.datasets.update |
| bigquery_jobs_cancel | destructive | bigquery.jobs.cancel |
| bigquery_jobs_delete | destructive | bigquery.jobs.delete |
| bigquery_jobs_get | read | bigquery.jobs.get |
| bigquery_jobs_get_query_results | read | bigquery.jobs.getQueryResults |
| bigquery_jobs_list | read | bigquery.jobs.list |
| bigquery_jobs_query | write | bigquery.jobs.query |
| bigquery_models_delete | destructive | bigquery.models.delete |
| bigquery_models_get | read | bigquery.models.get |
| bigquery_models_list | read | bigquery.models.list |
| bigquery_models_patch | write | bigquery.models.patch |
| bigquery_policies_batch_delete | destructive | bigquery.rowAccessPolicies.batchDelete |
| bigquery_policies_get_iam_policy | read | bigquery.rowAccessPolicies.getIamPolicy |
| bigquery_policies_test_iam_perms | read | bigquery.rowAccessPolicies.testIamPermissions |
| bigquery_projects_get_service_account | read | bigquery.projects.getServiceAccount |
| bigquery_projects_list | read | bigquery.projects.list |
| bigquery_routines_delete | destructive | bigquery.routines.delete |
| bigquery_routines_get | read | bigquery.routines.get |
| bigquery_routines_get_iam_policy | read | bigquery.routines.getIamPolicy |
| bigquery_routines_insert | write | bigquery.routines.insert |
| bigquery_routines_list | read | bigquery.routines.list |
| bigquery_routines_set_iam_policy | destructive | bigquery.routines.setIamPolicy |
| bigquery_routines_test_iam_perms | read | bigquery.routines.testIamPermissions |
| bigquery_routines_update | write | bigquery.routines.update |
| bigquery_row_access_policies_delete | destructive | bigquery.rowAccessPolicies.delete |
| bigquery_row_access_policies_get | read | bigquery.rowAccessPolicies.get |
| bigquery_row_access_policies_insert | write | bigquery.rowAccessPolicies.insert |
| bigquery_row_access_policies_list | read | bigquery.rowAccessPolicies.list |
| bigquery_row_access_policies_update | write | bigquery.rowAccessPolicies.update |
| bigquery_tabledata_insert_all | write | bigquery.tabledata.insertAll |
| bigquery_tabledata_list | read | bigquery.tabledata.list |
| bigquery_tables_delete | destructive | bigquery.tables.delete |
| bigquery_tables_get | read | bigquery.tables.get |
| bigquery_tables_get_iam_policy | read | bigquery.tables.getIamPolicy |
| bigquery_tables_insert | write | bigquery.tables.insert |
| bigquery_tables_list | read | bigquery.tables.list |
| bigquery_tables_patch | write | bigquery.tables.patch |
| bigquery_tables_set_iam_policy | destructive | bigquery.tables.setIamPolicy |
| bigquery_tables_test_iam_permissions | read | bigquery.tables.testIamPermissions |
| bigquery_tables_update | write | bigquery.tables.update |
| billin_billing_accounts_projects_list | read | cloudbilling.billingAccounts.projects.list |
| billing_billing_accounts_create | write | cloudbilling.billingAccounts.create |
| billing_billing_accounts_get | read | cloudbilling.billingAccounts.get |
| billing_billing_accounts_list | read | cloudbilling.billingAccounts.list |
| billing_billing_accounts_move | write | cloudbilling.billingAccounts.move |
| billing_billing_accounts_patch | write | cloudbilling.billingAccounts.patch |
| billing_billing_accts_get_iam_policy | read | cloudbilling.billingAccounts.getIamPolicy |
| billing_billing_accts_set_iam_policy | destructive | cloudbilling.billingAccounts.setIamPolicy |
| billing_billing_accts_sub_accts_list | read | cloudbilling.billingAccounts.subAccounts.list |
| billing_billing_accts_test_iam_perms | read | cloudbilling.billingAccounts.testIamPermissions |
| billing_message_send | destructive | cloudbilling.message.send |
| billing_message_stream | write | cloudbilling.message.stream |
| billing_orgs_billing_accts_create | write | cloudbilling.organizations.billingAccounts.create |
| billing_orgs_billing_accts_list | read | cloudbilling.organizations.billingAccounts.list |
| billing_orgs_billing_accts_move | write | cloudbilling.organizations.billingAccounts.move |
| billing_price_lookup | read | Look up Google Cloud prices |
| billing_projects_get_billing_info | read | cloudbilling.projects.getBillingInfo |
| billing_projects_update_billing_info | write | cloudbilling.projects.updateBillingInfo |
| billing_push_notif_configs_create | write | cloudbilling.tasks.pushNotificationConfigs.create |
| billing_push_notif_configs_delete | destructive | cloudbilling.tasks.pushNotificationConfigs.delete |
| billing_services_list | read | cloudbilling.services.list |
| billing_services_skus_list | read | cloudbilling.services.skus.list |
| billing_sub_accts_create | write | cloudbilling.billingAccounts.subAccounts.create |
| billing_tasks_cancel | destructive | cloudbilling.tasks.cancel |
| billing_tasks_get | read | cloudbilling.tasks.get |
| billing_tasks_push_notif_configs_get | read | cloudbilling.tasks.pushNotificationConfigs.get |
| billing_tasks_push_notif_configs_list | read | cloudbilling.tasks.pushNotificationConfigs.list |
| billing_tasks_subscribe | read | cloudbilling.tasks.subscribe |
| billing_v1_get_card | read | cloudbilling.getCard |
| bq_dataset_list | read | List BigQuery datasets |
| bq_job_get | read | Get BigQuery job rows |
| bq_query_read | read | Run read-only BigQuery query |
| bq_table_get | read | Get BigQuery table schema |
| bq_table_list | read | List BigQuery tables |
| bq_table_preview | read | Preview BigQuery table rows |
| cloud_apikey_create | write | Create API key |
| cloud_apikey_delete | destructive | Delete API key |
| cloud_apikey_get | read | Get API key |
| cloud_apikey_reveal | write | Reveal API key string |
| cloud_apikeys_list | read | List API keys |
| cloud_operation_get | read | Get operation status |
| cloud_project_create | write | Create project |
| cloud_project_delete | destructive | Delete project |
| cloud_project_get | read | Get project |
| cloud_project_iam_policy | read | Get project IAM policy |
| cloud_projects_search | read | Search projects |
| cloud_service_disable | destructive | Disable API |
| cloud_service_enable | write | Enable API |
| cloud_services_list | read | List APIs on a project |
| cloudprofi_profiles_create_offline | write | cloudprofiler.projects.profiles.createOffline |
| cloudprofi_projects_profiles_create | write | cloudprofiler.projects.profiles.create |
| cloudprofi_projects_profiles_list | read | cloudprofiler.projects.profiles.list |
| cloudprofi_projects_profiles_patch | write | cloudprofiler.projects.profiles.patch |
| crm_capability_configs_create | write | cloudresourcemanager.projects.capabilityConfigs.create |
| crm_capability_configs_delete | destructive | cloudresourcemanager.projects.capabilityConfigs.delete |
| crm_effective_tag_binding_colls_get | read | cloudresourcemanager.locations.effectiveTagBindingCollections.get |
| crm_effective_tags_list | read | cloudresourcemanager.effectiveTags.list |
| crm_folders_capabilities_get | read | cloudresourcemanager.folders.capabilities.get |
| crm_folders_capabilities_patch | write | cloudresourcemanager.folders.capabilities.patch |
| crm_folders_capability_configs_create | write | cloudresourcemanager.folders.capabilityConfigs.create |
| crm_folders_capability_configs_delete | destructive | cloudresourcemanager.folders.capabilityConfigs.delete |
| crm_folders_capability_configs_get | read | cloudresourcemanager.folders.capabilityConfigs.get |
| crm_folders_capability_configs_list | read | cloudresourcemanager.folders.capabilityConfigs.list |
| crm_folders_capability_configs_patch | write | cloudresourcemanager.folders.capabilityConfigs.patch |
| crm_folders_create | write | cloudresourcemanager.folders.create |
| crm_folders_delete | destructive | cloudresourcemanager.folders.delete |
| crm_folders_get | read | cloudresourcemanager.folders.get |
| crm_folders_get_iam_policy | read | cloudresourcemanager.folders.getIamPolicy |
| crm_folders_list | read | cloudresourcemanager.folders.list |
| crm_folders_move | write | cloudresourcemanager.folders.move |
| crm_folders_patch | write | cloudresourcemanager.folders.patch |
| crm_folders_search | read | cloudresourcemanager.folders.search |
| crm_folders_set_iam_policy | destructive | cloudresourcemanager.folders.setIamPolicy |
| crm_folders_test_iam_permissions | read | cloudresourcemanager.folders.testIamPermissions |
| crm_folders_undelete | write | cloudresourcemanager.folders.undelete |
| crm_liens_create | write | cloudresourcemanager.liens.create |
| crm_liens_delete | destructive | cloudresourcemanager.liens.delete |
| crm_liens_get | read | cloudresourcemanager.liens.get |
| crm_liens_list | read | cloudresourcemanager.liens.list |
| crm_operations_get | read | cloudresourcemanager.operations.get |
| crm_organizations_get | read | cloudresourcemanager.organizations.get |
| crm_organizations_get_iam_policy | read | cloudresourcemanager.organizations.getIamPolicy |
| crm_organizations_search | read | cloudresourcemanager.organizations.search |
| crm_organizations_set_iam_policy | destructive | cloudresourcemanager.organizations.setIamPolicy |
| crm_orgs_capability_configs_create | write | cloudresourcemanager.organizations.capabilityConfigs.create |
| crm_orgs_capability_configs_delete | destructive | cloudresourcemanager.organizations.capabilityConfigs.delete |
| crm_orgs_capability_configs_get | read | cloudresourcemanager.organizations.capabilityConfigs.get |
| crm_orgs_capability_configs_list | read | cloudresourcemanager.organizations.capabilityConfigs.list |
| crm_orgs_capability_configs_patch | write | cloudresourcemanager.organizations.capabilityConfigs.patch |
| crm_orgs_test_iam_perms | read | cloudresourcemanager.organizations.testIamPermissions |
| crm_projects_capability_configs_get | read | cloudresourcemanager.projects.capabilityConfigs.get |
| crm_projects_capability_configs_list | read | cloudresourcemanager.projects.capabilityConfigs.list |
| crm_projects_capability_configs_patch | write | cloudresourcemanager.projects.capabilityConfigs.patch |
| crm_projects_create | write | cloudresourcemanager.projects.create |
| crm_projects_delete | destructive | cloudresourcemanager.projects.delete |
| crm_projects_get | read | cloudresourcemanager.projects.get |
| crm_projects_get_iam_policy | read | cloudresourcemanager.projects.getIamPolicy |
| crm_projects_list | read | cloudresourcemanager.projects.list |
| crm_projects_move | write | cloudresourcemanager.projects.move |
| crm_projects_patch | write | cloudresourcemanager.projects.patch |
| crm_projects_search | read | cloudresourcemanager.projects.search |
| crm_projects_set_iam_policy | destructive | cloudresourcemanager.projects.setIamPolicy |
| crm_projects_test_iam_permissions | read | cloudresourcemanager.projects.testIamPermissions |
| crm_projects_undelete | write | cloudresourcemanager.projects.undelete |
| crm_tag_binding_collections_get | read | cloudresourcemanager.locations.tagBindingCollections.get |
| crm_tag_binding_collections_patch | write | cloudresourcemanager.locations.tagBindingCollections.patch |
| crm_tag_bindings_create | write | cloudresourcemanager.tagBindings.create |
| crm_tag_bindings_delete | destructive | cloudresourcemanager.tagBindings.delete |
| crm_tag_bindings_list | read | cloudresourcemanager.tagBindings.list |
| crm_tag_keys_create | write | cloudresourcemanager.tagKeys.create |
| crm_tag_keys_delete | destructive | cloudresourcemanager.tagKeys.delete |
| crm_tag_keys_get | read | cloudresourcemanager.tagKeys.get |
| crm_tag_keys_get_iam_policy | read | cloudresourcemanager.tagKeys.getIamPolicy |
| crm_tag_keys_get_namespaced | read | cloudresourcemanager.tagKeys.getNamespaced |
| crm_tag_keys_list | read | cloudresourcemanager.tagKeys.list |
| crm_tag_keys_patch | write | cloudresourcemanager.tagKeys.patch |
| crm_tag_keys_set_iam_policy | destructive | cloudresourcemanager.tagKeys.setIamPolicy |
| crm_tag_keys_test_iam_permissions | read | cloudresourcemanager.tagKeys.testIamPermissions |
| crm_tag_values_create | write | cloudresourcemanager.tagValues.create |
| crm_tag_values_delete | destructive | cloudresourcemanager.tagValues.delete |
| crm_tag_values_get | read | cloudresourcemanager.tagValues.get |
| crm_tag_values_get_iam_policy | read | cloudresourcemanager.tagValues.getIamPolicy |
| crm_tag_values_get_namespaced | read | cloudresourcemanager.tagValues.getNamespaced |
| crm_tag_values_list | read | cloudresourcemanager.tagValues.list |
| crm_tag_values_patch | write | cloudresourcemanager.tagValues.patch |
| crm_tag_values_set_iam_policy | destructive | cloudresourcemanager.tagValues.setIamPolicy |
| crm_tag_values_tag_holds_create | write | cloudresourcemanager.tagValues.tagHolds.create |
| crm_tag_values_tag_holds_delete | destructive | cloudresourcemanager.tagValues.tagHolds.delete |
| crm_tag_values_tag_holds_list | read | cloudresourcemanager.tagValues.tagHolds.list |
| crm_tag_values_test_iam_permissions | read | cloudresourcemanager.tagValues.testIamPermissions |
| crm_v3_fetch_resource_semantics | read | cloudresourcemanager.fetchResourceSemantics |
| gcs_read_object | read | Read a Cloud Storage object as base64 |
| gcs_read_text | read | Read a Cloud Storage object as text |
| gcs_write_text | write | Write a Cloud Storage object |
| health | read | Server health |
| iam_policies_create_policy | write | iam.policies.createPolicy |
| iam_policies_delete | destructive | iam.policies.delete |
| iam_policies_get | read | iam.policies.get |
| iam_policies_list_policies | read | iam.policies.listPolicies |
| iam_policies_operations_get | read | iam.policies.operations.get |
| iam_policies_update | write | iam.policies.update |
| iam_role_get | read | Get an IAM role |
| iam_roles_list | read | List IAM roles |
| logging_entries_list | read | List log entries |
| monitor_alert_policies_create | write | monitoring.projects.alertPolicies.create |
| monitor_alert_policies_delete | destructive | monitoring.projects.alertPolicies.delete |
| monitor_chans_get_verification_code | read | monitoring.projects.notificationChannels.getVerificationCode |
| monitor_chans_send_verification_code | write | monitoring.projects.notificationChannels.sendVerificationCode |
| monitor_collectd_time_series_create | write | monitoring.projects.collectdTimeSeries.create |
| monitor_folders_time_series_list | read | monitoring.folders.timeSeries.list |
| monitor_metric_descriptors_create | write | monitoring.projects.metricDescriptors.create |
| monitor_metric_descriptors_delete | destructive | monitoring.projects.metricDescriptors.delete |
| monitor_metric_descriptors_get | read | monitoring.projects.metricDescriptors.get |
| monitor_metric_descriptors_list | read | monitoring.projects.metricDescriptors.list |
| monitor_monitored_resource_descs_get | read | monitoring.projects.monitoredResourceDescriptors.get |
| monitor_monitored_resource_descs_list | read | monitoring.projects.monitoredResourceDescriptors.list |
| monitor_notif_chan_descs_get | read | monitoring.projects.notificationChannelDescriptors.get |
| monitor_notif_chan_descs_list | read | monitoring.projects.notificationChannelDescriptors.list |
| monitor_notification_channels_create | write | monitoring.projects.notificationChannels.create |
| monitor_notification_channels_delete | destructive | monitoring.projects.notificationChannels.delete |
| monitor_notification_channels_get | read | monitoring.projects.notificationChannels.get |
| monitor_notification_channels_list | read | monitoring.projects.notificationChannels.list |
| monitor_notification_channels_patch | write | monitoring.projects.notificationChannels.patch |
| monitor_notification_channels_verify | write | monitoring.projects.notificationChannels.verify |
| monitor_orgs_time_series_list | read | monitoring.organizations.timeSeries.list |
| monitor_projects_alert_policies_get | read | monitoring.projects.alertPolicies.get |
| monitor_projects_alert_policies_list | read | monitoring.projects.alertPolicies.list |
| monitor_projects_alert_policies_patch | write | monitoring.projects.alertPolicies.patch |
| monitor_projects_alerts_get | read | monitoring.projects.alerts.get |
| monitor_projects_alerts_list | read | monitoring.projects.alerts.list |
| monitor_projects_groups_create | write | monitoring.projects.groups.create |
| monitor_projects_groups_delete | destructive | monitoring.projects.groups.delete |
| monitor_projects_groups_get | read | monitoring.projects.groups.get |
| monitor_projects_groups_list | read | monitoring.projects.groups.list |
| monitor_projects_groups_members_list | read | monitoring.projects.groups.members.list |
| monitor_projects_groups_update | write | monitoring.projects.groups.update |
| monitor_projects_snoozes_create | write | monitoring.projects.snoozes.create |
| monitor_projects_snoozes_get | read | monitoring.projects.snoozes.get |
| monitor_projects_snoozes_list | read | monitoring.projects.snoozes.list |
| monitor_projects_snoozes_patch | write | monitoring.projects.snoozes.patch |
| monitor_projects_time_series_create | write | monitoring.projects.timeSeries.create |
| monitor_projects_time_series_list | read | monitoring.projects.timeSeries.list |
| monitor_projects_time_series_query | read | monitoring.projects.timeSeries.query |
| monitor_services_create | write | monitoring.services.create |
| monitor_services_delete | destructive | monitoring.services.delete |
| monitor_services_get | read | monitoring.services.get |
| monitor_services_list | read | monitoring.services.list |
| monitor_services_objectives_create | write | monitoring.services.serviceLevelObjectives.create |
| monitor_services_objectives_delete | destructive | monitoring.services.serviceLevelObjectives.delete |
| monitor_services_objectives_get | read | monitoring.services.serviceLevelObjectives.get |
| monitor_services_objectives_list | read | monitoring.services.serviceLevelObjectives.list |
| monitor_services_objectives_patch | write | monitoring.services.serviceLevelObjectives.patch |
| monitor_services_patch | write | monitoring.services.patch |
| monitor_time_series_create_service | write | monitoring.projects.timeSeries.createService |
| monitor_uptime_check_configs_create | write | monitoring.projects.uptimeCheckConfigs.create |
| monitor_uptime_check_configs_delete | destructive | monitoring.projects.uptimeCheckConfigs.delete |
| monitor_uptime_check_configs_get | read | monitoring.projects.uptimeCheckConfigs.get |
| monitor_uptime_check_configs_list | read | monitoring.projects.uptimeCheckConfigs.list |
| monitor_uptime_check_configs_patch | write | monitoring.projects.uptimeCheckConfigs.patch |
| monitor_uptime_check_ips_list | read | monitoring.uptimeCheckIps.list |
| monitoring_dashboard_get | read | Get a monitoring dashboard |
| monitoring_dashboards_list | read | List monitoring dashboards |
| monitoring_query_promql | read | Query Cloud Monitoring with PromQL |
| policytrou_iam_troubleshoot | write | policytroubleshooter.iam.troubleshoot |
| project_enable_missing | write | Enable the APIs the MCPs need |
| project_readiness | read | Check a project for the MCPs |
| serviceusa_operations_cancel | destructive | serviceusage.operations.cancel |
| serviceusa_operations_delete | destructive | serviceusage.operations.delete |
| serviceusa_operations_get | read | serviceusage.operations.get |
| serviceusa_operations_list | read | serviceusage.operations.list |
| serviceusa_services_batch_enable | write | serviceusage.services.batchEnable |
| serviceusa_services_batch_get | read | serviceusage.services.batchGet |
| serviceusa_services_disable | destructive | serviceusage.services.disable |
| serviceusa_services_enable | write | serviceusage.services.enable |
| serviceusa_services_get | read | serviceusage.services.get |
| serviceusa_services_list | read | serviceusage.services.list |
| storage_anywhere_caches_disable | destructive | storage.anywhereCaches.disable |
| storage_anywhere_caches_get | read | storage.anywhereCaches.get |
| storage_anywhere_caches_insert | write | storage.anywhereCaches.insert |
| storage_anywhere_caches_list | read | storage.anywhereCaches.list |
| storage_anywhere_caches_pause | write | storage.anywhereCaches.pause |
| storage_anywhere_caches_resume | write | storage.anywhereCaches.resume |
| storage_anywhere_caches_update | write | storage.anywhereCaches.update |
| storage_bucket_access_controls_delete | destructive | storage.bucketAccessControls.delete |
| storage_bucket_access_controls_get | read | storage.bucketAccessControls.get |
| storage_bucket_access_controls_insert | write | storage.bucketAccessControls.insert |
| storage_bucket_access_controls_list | read | storage.bucketAccessControls.list |
| storage_bucket_access_controls_patch | write | storage.bucketAccessControls.patch |
| storage_bucket_access_controls_update | write | storage.bucketAccessControls.update |
| storage_buckets_delete | destructive | storage.buckets.delete |
| storage_buckets_get | read | storage.buckets.get |
| storage_buckets_get_iam_policy | read | storage.buckets.getIamPolicy |
| storage_buckets_get_storage_layout | read | storage.buckets.getStorageLayout |
| storage_buckets_insert | write | storage.buckets.insert |
| storage_buckets_list | read | storage.buckets.list |
| storage_buckets_lock_retention_policy | write | storage.buckets.lockRetentionPolicy |
| storage_buckets_patch | write | storage.buckets.patch |
| storage_buckets_relocate | write | storage.buckets.relocate |
| storage_buckets_restore | write | storage.buckets.restore |
| storage_buckets_set_iam_policy | destructive | storage.buckets.setIamPolicy |
| storage_buckets_test_iam_permissions | read | storage.buckets.testIamPermissions |
| storage_buckets_update | write | storage.buckets.update |
| storage_controls_delete | destructive | storage.defaultObjectAccessControls.delete |
| storage_controls_get | read | storage.defaultObjectAccessControls.get |
| storage_controls_insert | write | storage.defaultObjectAccessControls.insert |
| storage_controls_list | read | storage.defaultObjectAccessControls.list |
| storage_controls_patch | write | storage.defaultObjectAccessControls.patch |
| storage_controls_update | write | storage.defaultObjectAccessControls.update |
| storage_folders_delete | destructive | storage.folders.delete |
| storage_folders_delete_recursive | destructive | storage.folders.deleteRecursive |
| storage_folders_get | read | storage.folders.get |
| storage_folders_get_iam_policy | read | storage.managedFolders.getIamPolicy |
| storage_folders_insert | write | storage.folders.insert |
| storage_folders_list | read | storage.folders.list |
| storage_folders_rename | write | storage.folders.rename |
| storage_folders_set_iam_policy | destructive | storage.managedFolders.setIamPolicy |
| storage_folders_test_iam_perms | read | storage.managedFolders.testIamPermissions |
| storage_managed_folders_delete | destructive | storage.managedFolders.delete |
| storage_managed_folders_get | read | storage.managedFolders.get |
| storage_managed_folders_insert | write | storage.managedFolders.insert |
| storage_managed_folders_list | read | storage.managedFolders.list |
| storage_managed_folders_update | write | storage.managedFolders.update |
| storage_notifications_delete | destructive | storage.notifications.delete |
| storage_notifications_get | read | storage.notifications.get |
| storage_notifications_insert | write | storage.notifications.insert |
| storage_notifications_list | read | storage.notifications.list |
| storage_object_access_controls_delete | destructive | storage.objectAccessControls.delete |
| storage_object_access_controls_get | read | storage.objectAccessControls.get |
| storage_object_access_controls_insert | write | storage.objectAccessControls.insert |
| storage_object_access_controls_list | read | storage.objectAccessControls.list |
| storage_object_access_controls_patch | write | storage.objectAccessControls.patch |
| storage_object_access_controls_update | write | storage.objectAccessControls.update |
| storage_objects_bulk_restore | write | storage.objects.bulkRestore |
| storage_objects_compose | write | storage.objects.compose |
| storage_objects_copy | write | storage.objects.copy |
| storage_objects_delete | destructive | storage.objects.delete |
| storage_objects_get | read | storage.objects.get |
| storage_objects_get_iam_policy | read | storage.objects.getIamPolicy |
| storage_objects_list | read | storage.objects.list |
| storage_objects_move | write | storage.objects.move |
| storage_objects_patch | write | storage.objects.patch |
| storage_objects_restore | write | storage.objects.restore |
| storage_objects_rewrite | write | storage.objects.rewrite |
| storage_objects_set_iam_policy | destructive | storage.objects.setIamPolicy |
| storage_objects_test_iam_permissions | read | storage.objects.testIamPermissions |
| storage_objects_update | write | storage.objects.update |
| storage_objects_view_full_context | read | storage.objects.viewFullContext |
| storage_operations_cancel | destructive | storage.buckets.operations.cancel |
| storage_operations_get | read | storage.buckets.operations.get |
| storage_operations_list | read | storage.buckets.operations.list |
| storage_ops_advance_relocate_bucket | write | storage.buckets.operations.advanceRelocateBucket |
| storage_projects_hmac_keys_create | write | storage.projects.hmacKeys.create |
| storage_projects_hmac_keys_delete | destructive | storage.projects.hmacKeys.delete |
| storage_projects_hmac_keys_get | read | storage.projects.hmacKeys.get |
| storage_projects_hmac_keys_list | read | storage.projects.hmacKeys.list |
| storage_projects_hmac_keys_update | write | storage.projects.hmacKeys.update |
| storage_projects_service_account_get | read | storage.projects.serviceAccount.get |
| storage_rapid_caches_disable | destructive | storage.rapidCaches.disable |
| storage_rapid_caches_get | read | storage.rapidCaches.get |
| storage_rapid_caches_insert | write | storage.rapidCaches.insert |
| storage_rapid_caches_list | read | storage.rapidCaches.list |
| storage_rapid_caches_update | write | storage.rapidCaches.update |
| trace_projects_traces_batch_write | write | cloudtrace.projects.traces.batchWrite |
| trace_traces_spans_create_span | write | cloudtrace.projects.traces.spans.createSpan |
The plugin option toolset can list fewer tools. google lists 59 tools that do the same jobs as Google's official MCP server for this product; curated lists the hand-written and gateway tools; all is the default.
Sign-in
gcloud belongs to the cloud login group. Log in once for the group: create a Desktop OAuth client in a Google Cloud project, save its file with npx google-services-mcps setup-client, then run npx google-services-mcps login cloud. If no token is stored, the cloud servers fall back to Application Default Credentials.
The plugin's scope file lists 17 OAuth scopes for 1 APIs. A login asks only for the scopes of its profile: readonly (the default), readwrite, full, or an exact list.
| API | Scope |
|---|---|
| gcloud | https://www.googleapis.com/auth/apikeys |
| gcloud | https://www.googleapis.com/auth/apikeys.readonly |
| gcloud | https://www.googleapis.com/auth/bigquery |
| gcloud | https://www.googleapis.com/auth/bigquery.insertdata |
| gcloud | https://www.googleapis.com/auth/cloud-billing |
| gcloud | https://www.googleapis.com/auth/cloud-billing.readonly |
| gcloud | https://www.googleapis.com/auth/cloud-platform |
| gcloud | https://www.googleapis.com/auth/cloud-platform.read-only |
| gcloud | https://www.googleapis.com/auth/cloudasset |
| gcloud | https://www.googleapis.com/auth/devstorage.full_control |
| gcloud | https://www.googleapis.com/auth/devstorage.read_only |
| gcloud | https://www.googleapis.com/auth/devstorage.read_write |
| gcloud | https://www.googleapis.com/auth/monitoring |
| gcloud | https://www.googleapis.com/auth/monitoring.read |
| gcloud | https://www.googleapis.com/auth/monitoring.write |
| gcloud | https://www.googleapis.com/auth/service.management |
| gcloud | https://www.googleapis.com/auth/trace.append |
Plugin details
- Plugin
- gcloud
- MCP server
- gcloud
- Display name
- Google Cloud
- Version
- 2.17.0
- Marketplace
- google-services-mcps
- Login group
- cloud
- Marketplace category
- cloud
- Plugin options
- allow_writes, confirmation, token_dir, toolset
- Server kind
- curated+discovery