gcloud-mcp Servers CI License

gcloud MCP Server ☁️

The gcloud Model Context Protocol (MCP) server enables AI assistants to easily interact with the Google Cloud environment using the gcloud CLI. With the gcloud MCP server you can:

• Interact with Google Cloud using natural language. Describe the outcome you want instead of memorizing complex command syntax, flags, and arguments.
• Automate and simplify complex workflows. Chain multiple cloud operations into a single, repeatable command to reduce manual effort and the chance of error.
• Lower the barrier to entry for cloud management. Empower team members who are less familiar with gcloud to perform powerful actions confidently and safely.

📡 Available MCP Servers

This repository also hosts other MCP servers in addition to the gcloud MCP server. An up to date list is below, and links to other Google Cloud MCP servers hosted outside of this repo are here.

MCP Server Name	Description	Package Name	Version
gcloud	Interact with Google Cloud via the gcloud CLI using natural language prompts.	gcloud-mcp	Version
observability	Access Google Cloud Observability APIs to query logs, metrics, and traces.	observability-mcp	Version
storage	Interact with Google Cloud Storage for bucket and object management.	storage-mcp	Version
backupdr	Interact with Google Cloud Backup and Disaster Recovery.	backupdr-mcp	Version

🚀 Getting Started

Prerequisites

• Node.js: version 20 or higher
• gcloud CLI

✨ Set up your MCP server

Gemini CLI and Gemini Code Assist

To integrate MCP servers with Gemini CLI or Gemini Code Assist, run the setup command below from your home directory for MCP server listed in the table. This will install the MCP server as a Gemini CLI extension. for the current user, making it available for all your projects.

npx @google-cloud/[PACKAGE_NAME] init --agent=gemini-cli

For example, for the gcloud-mcp:

npx @google-cloud/gcloud-mcp init --agent=gemini-cli

After the initialization process, you can verify that the gcloud-mcp server is configured correctly by running the following command:

gemini mcp list

> ✓ gcloud: npx -y @google-cloud/gcloud-mcp (stdio) - Connected

For other AI clients

To use MCP servers in this repo with other clients, add the following snippet to their respective JSON configuration files for each MCP server:

"[SERVER_NAME]": {
  "command": "npx",
  "args": ["-y", "@google-cloud/[PACKAGE_NAME]"]
}

For example, for gcloud:

"gcloud": {
  "command": "npx",
  "args": ["-y", "@google-cloud/gcloud-mcp"]
}

Instructions for popular tools:

• Claude Desktop: Open Claude > Settings > Developer > Edit Config and edit claude_desktop_config.json.
• Cline: Click the MCP Servers icon, then Configure MCP Servers to edit cline_mcp_settings.json.
• Cursor: Edit .cursor/mcp.json for a single project or ~/.cursor/mcp.json for all projects.
• Gemini CLI (Manual Setup): If not using extensions, edit .gemini/settings.json for a single project or ~/.gemini/settings.json for all projects.

For Visual Studio Code edit the .vscode/mcp.json file in your workspace for a single project or your global user settings file for all projects:

"servers": {
  "[SERVER_NAME]": {
    "command": "npx",
    "args": ["-y", "@google-cloud/[PACKAGE_NAME]"]
  }
}

For example, for gcloud and observability:

"servers": {
  "gcloud": {
    "command": "npx",
    "args": ["-y", "@google-cloud/gcloud-mcp"]
  },
  "observability": {
    "command": "npx",
    "args": ["-y", "@google-cloud/observability-mcp"]
  },
}

🛠 Local Development

For more information regarding installing the repository locally, please see development.md

🧰 Available MCP Tools

MCP Server	Tool	Description
gcloud	run_gcloud_command	Executes a gcloud command. Some commands have been restricted from execution by the agent. See MCP Permissions for more information.
observability	list_log_entries	Lists log entries from a project.
	list_log_names	Lists log names from a project.
	list_buckets	Lists log buckets from a project.
	list_views	Lists log views from a project.
	list_sinks	Lists log sinks from a project.
	list_log_scopes	Lists log scopes from a project.
	list_metric_descriptors	Lists metric descriptors for a project.
	list_time_series	Lists time series data for a given metric.
	list_alert_policies	Lists the alert policies in a project.
	list_traces	Searches for traces in a project.
	get_trace	Gets a specific trace by id in a project.
	list_group_stats	Lists the error groups for a project.
storage	list_objects	Lists objects in a GCS bucket.
	read_object_metadata	Reads comprehensive metadata for a specific object.
	read_object_content	Reads the content of a specific object.
	delete_object	Deletes a specific object from a bucket.
	write_object	Writes a new object to a bucket.
	update_object_metadata	Updates the custom metadata of an existing object.
	copy_object	Copies an object from one bucket to another.
	move_object	Moves an object from one bucket to another.
	upload_object	Uploads a file to a GCS bucket.
	download_object	Downloads an object from GCS to a local file.
	list_buckets	Lists all buckets in a project.
	create_bucket	Creates a new bucket.
	delete_bucket	Deletes a bucket.
	get_bucket_metadata	Gets comprehensive metadata for a specific bucket.
	update_bucket_labels	Updates labels for a bucket.
	get_bucket_location	Gets the location of a bucket.
	view_iam_policy	Views the IAM policy for a bucket.
	check_iam_permissions	Tests IAM permissions for a bucket.
	get_metadata_table_schema	Checks if GCS insights service is enabled and returns the BigQuery table schema for a given insights dataset configuration.
	execute_insights_query	Executes a BigQuery SQL query against an insights dataset and returns the result.
	list_insights_configs	Lists the names of all Storage Insights dataset configurations for a given project.
backupdr	list_backup_vaults	Lists all backup vaults in a given project and location.
	get_backup_vault	Gets details of a specific backup vault.
	list_backup_plans	Lists all backup plans in a given project and location.
	get_backup_plan	Gets details of a specific backup plan.
	list_backup_plan_associations	Lists all associations between backup plans and resources.
	get_backup_plan_association	Gets details of a specific backup plan association.
	list_datasources	Lists all data sources within a backup vault.
	get_datasource	Gets details of a specific data source.
	list_backups	Lists all backups for a given data source.
	get_backup	Gets details of a specific backup.
	find_protectable_resources	Discovers resources (VMs, Disks, SQL) that can be protected.
	get_backupdr_operation	Retrieves the status of a long-running BackupDR operation.
	get_csql_operation	Retrieves the status of a long-running Cloud SQL operation.
	create_backup_vault	Creates a new backup vault in a specified location.
	create_backup_plan	Creates a new backup plan with defined rules and retention.
	update_backup_plan	Modifies an existing backup plan.
	create_backup_plan_association	Associates a resource with a backup plan to start protection.
	restore_backup	Restores a backup to a target Compute Engine instance or disk.
	csql_restore	Restores a Cloud SQL backup to a target instance.
	delete_backup_vault	Deletes a backup vault.
	delete_backup_plan	Deletes a backup plan.
	delete_backup_plan_association	Removes protection from a resource by deleting its association.
	delete_backup	Deletes a specific backup from a vault.

🔑 MCP Permissions

The permissions of the gcloud MCP are directly tied to the permissions of the active gcloud account. To restrict permissions and operate with the principle of least privilege, you can authorize as a service account using impersonation and assign the service account a role with limited permissions.

By default, the gcloud MCP prevents execution of gcloud commands that don't make sense for AI agents. This is done to restrict commands that can run arbitrary inputs and initiate interactive sessions. See here for the list of denied commands.

💫 Other Google Cloud MCP Servers

Google Cloud offers these other servers:

• Firebase MCP
• Google Analytics MCP
• Google Cloud Genmedia MCP
• Google Cloud Run MCP
• Google Kubernetes Engine (GKE) MCP
• Google Security Operations and Threat Intelligence MCP
• MCP Toolbox for Databases

👥 Contributing

We welcome contributions! Whether you're fixing bugs, sharing feedback, or improving documentation, your contributions are welcome. Please read our Contributing Guide to get started.

📄 Important Notes

This repository is currently in preview and may see breaking changes. This repository provides a solution, not an officially supported Google product. It is not covered under Google Cloud Terms of Service. It may break when the MCP specification, other SDKs, or when other solutions and products change. See also our Security Policy.