Cloud Run MCP Server

Cloud Run deployments via MCP agents, IDEs, and CLI tools.

Data last scanned today · Reviewed today

42 1 dangerous tool7 tools★ 622JavaScriptApache-2.0

Overview

Cloud Run MCP Server enables AI agents and IDEs to manage Google Cloud Run resources directly. It provides a suite of tools for deploying file contents or entire local folders to Cloud Run, alongside utilities for retrieving service logs, listing existing services, and querying project details. The server supports integration with AI-powered development environments and CLI agents, including the Google Gen AI SDK. By using its pre-configured prompts, users can automate deployment workflows and log monitoring based on the current working directory or specific service identifiers.

Our verdict

This project currently carries a high risk level with a security score of 42/100. Key factors contributing to this rating include that it remains community-maintained rather than being officially supported by the vendor, and critical security aspects such as OAuth and read-only mode support have not yet been editorially reviewed. Given the high-risk score and unverified authentication mechanisms, this tool should be treated with caution and avoided in production-critical or highly sensitive infrastructure environments.

Active development with commits within the last 24 hours.
Small dependency footprint with only 17 direct dependencies.
Comprehensive documentation for deployment and configuration.
Permissive Apache-2.0 open source license.

Lacks official maintenance by the Google Cloud vendor.
Authentication methods have not yet undergone editorial review.
Read-only mode and OAuth implementations remain unverified.
Security score of 42/100 indicates significant unaddressed risk factors.

Setup

Claude Desktop

{
  "mcpServers": {
    "cloud-run-mcp": {
      "args": [
        "-y",
        "@google-cloud/cloud-run-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
deploy-file-contents	Deploys files to Cloud Run by providing their contents directly.	medium
list-services	Lists Cloud Run services in a given project and region.	low
get-service	Gets details for a specific Cloud Run service.	low
get-service-log	Gets Logs and Error Messages for a specific Cloud Run service.	low
deploy-local-folder	Deploys a local folder to a Google Cloud Run service.	medium
list-projects	Lists available GCP projects.	low
create-project	Creates a new GCP project and attach it to the first available billing account.	high

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›Which tools are restricted to local operation?

The tools deploy-local-folder, list-projects, and create-project are only available when the server is running locally.

›How can I configure the default deployment destination?

You can set default project, region, and service name preferences using the GOOGLE_CLOUD_PROJECT, GOOGLE_CLOUD_REGION, and DEFAULT_SERVICE_NAME environment variables.

›How does the server handle IAM permission checks?

The server includes an optional IAM check for Cloud Run services, which is disabled by default via the SKIP_IAM_CHECK environment variable.

›What is the recommended way to prevent DNS rebinding attacks?

You can enable host validation by setting ENABLE_HOST_VALIDATION to true and configuring the ALLOWED_HOSTS variable.

›What authentication steps are required to use this as a Gemini CLI extension?

You must log in using gcloud auth login and set up application credentials with gcloud auth application-default login.