GCP MCP Server

An MCP (Model Context Protocol) server that lets AI agents manage Google Cloud Platform — no gcloud CLI or Terraform required. It talks directly to GCP REST APIs using a service account.

Tools Exposed

📁 Projects

🔑 IAM & Service Accounts

⚙️ APIs / Services

Related MCP server: GCP MCP Server

Prerequisites

1. A Google Cloud service account with appropriate permissions (see below)

2. A JSON key file downloaded for that service account

3. Node.js 18+

Minimum IAM Permissions for the Service Account

Setup

1. Get a service account key

# In Google Cloud Console:
# IAM & Admin → Service Accounts → Create → download JSON key
# OR via gcloud (if installed):
gcloud iam service-accounts create gcp-mcp-sa \
  --display-name "GCP MCP Server"

gcloud iam service-accounts keys create key.json \
  --iam-account gcp-mcp-sa@YOUR_PROJECT.iam.gserviceaccount.com

2. Set environment variable

export GOOGLE_APPLICATION_CREDENTIALS=/home/nathan/googlemcp/key.json

Or copy .env.example → .env and fill in the path (you'll need to load it yourself or use dotenv).

3. Build

npm run build

4. Test the server starts

node dist/index.js
# Should print: ✅ GCP MCP Server running on stdio

Connecting to an Agent

Antigravity / Claude Desktop (MCP config)

Add to your MCP settings (e.g. ~/.config/antigravity/mcp.json or Claude Desktop config):

{
  "mcpServers": {
    "gcp": {
      "command": "node",
      "args": ["/home/nathan/googlemcp/dist/index.js"],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "/home/nathan/googlemcp/key.json"
      }
    }
  }
}

Generic stdio MCP

The server communicates over stdin/stdout using the MCP protocol. Any MCP-compatible client can connect by spawning the process:

node /home/nathan/googlemcp/dist/index.js

Example Agent Interactions

"List all my active GCP projects" → calls gcp_list_projects with filter: "state:ACTIVE"

"Create a new project called my-api-backend" → calls gcp_create_project with projectId: "my-api-backend", then gcp_get_operation to poll

"Enable Cloud Run and Cloud Build on my project" → calls gcp_enable_apis with ["run.googleapis.com", "cloudbuild.googleapis.com"]

"Create a deployer service account and give it Cloud Run invoker" → gcp_create_service_account → gcp_add_project_iam_binding with roles/run.invoker

Project Structure

googlemcp/
├── src/
│   ├── auth.ts           # Service account token fetcher
│   ├── index.ts          # MCP server entry point (21 tools registered)
│   └── tools/
│       ├── projects.ts   # Project CRUD (CRM v3)
│       ├── iam.ts        # Service accounts + IAM policies
│       └── apis.ts       # API enable/disable (Service Usage v1)
├── dist/                 # Compiled output (after npm run build)
├── tsconfig.json
└── package.json