Gcloud MCP Server

Google Cloud CLI commands executed through natural language prompts for AI assistance.

Data last scanned today · Reviewed today

45 9 dangerous tools56 tools★ 870TypeScriptApache-2.0

Overview

The Gcloud MCP Server acts as an interface between your AI assistant and the Google Cloud CLI. By interpreting natural language requests, it allows you to perform cloud management tasks without needing to manually construct complex CLI syntax, flags, or arguments. Beyond basic command execution, the repository includes specialized modules for observability, cloud storage, and backup disaster recovery. This modular approach allows users to chain operations into automated, repeatable workflows, aimed at reducing manual error in cloud environment management.

Our verdict

With a security score of 45/100, this tool is categorized as high risk. The security architecture, specifically its authentication methods, OAuth support, and read-only mode capabilities, has not yet been editorially reviewed. Due to these significant gaps in reviewed security controls, it is recommended only for experimental or non-critical development environments by experienced users who can manually monitor the tool's interactions with their cloud infrastructure.

Single direct dependency minimizes supply-chain surface area.
Active development with commits recorded as recently as three days ago.
Includes bundled tools for storage, observability, and disaster recovery.

Authentication and OAuth support have not undergone security review.
Read-only execution modes lack formal verification.
Community-maintained project rather than an official vendor release.

Setup

Claude Desktop

{
  "mcpServers": {
    "gcloud-mcp": {
      "args": [
        "-y",
        "@google-cloud/gcloud-mcp-servers"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
run_gcloud_command	Executes a gcloud command. Some commands have been restricted from execution by the agent. See MCP Permissions for more information.	high
list_log_entries	Lists log entries from a project.	low
list_log_names	Lists log names from a project.	low
list_buckets	Lists log buckets from a project.	low
list_views	Lists log views from a project.	low
list_sinks	Lists log sinks from a project.	low
list_log_scopes	Lists log scopes from a project.	low
list_metric_descriptors	Lists metric descriptors for a project.	low
list_time_series	Lists time series data for a given metric.	low
list_alert_policies	Lists the alert policies in a project.	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What are the prerequisite software requirements?

You must have Node.js version 20 or higher and the gcloud CLI installed on your system.

›How do I add the server to Gemini CLI or Gemini Code Assist?

You can run the initialization command `npx @google-cloud/[PACKAGE_NAME] init --agent=gemini-cli` from your home directory to install it as an extension.

›How do I configure the server for non-Gemini AI clients?

You must add a JSON configuration snippet containing the `npx` command and the appropriate `@google-cloud/` package arguments to your specific client's configuration file.

›Can I use these MCP servers with Claude Desktop or Cursor?

Yes, you can configure the servers by editing the configuration files specified for those tools, such as `claude_desktop_config.json` for Claude or the `.cursor/mcp.json` file for Cursor.

›Are there other Google Cloud-related MCP servers available in this repository?

Yes, the repository also hosts servers for observability, storage, and backup and disaster recovery (backupdr).