The Google Cloud Platform (GCP) Toolkit enables your agent to interact with BigQuery, Cloud Run (services and HTTP-triggered functions), and Cloud SQL. Authentication is handled via a service-account JSON key stored as a connection — the agent acts as the service account and inherits its IAM roles.
Prerequisites
Before configuring the GCP Toolkit, you need an active Google Cloud connection. If you haven’t set one up yet, go to Settings → Connections to create one.
Connections are managed centrally in Settings → Connections. The service-account JSON is stored encrypted; only the client_email and project are surfaced to agents.
- Open your agent and go to Toolkits.
- Find Google Cloud Platform and click Add to Agent.
- Click Configure to open the configuration panel.
Configuration
Connection
Use the Select GCP Connection dropdown to choose the service account connection the agent will use. To manage or create connections, click Manage Connections in the upper right.
About Google Cloud Integration
Keep the following in mind when configuring the toolkit:
- The agent inherits the service account’s IAM roles — grant only the roles required (e.g.
BigQuery Data Viewer, Cloud Run Invoker, Cloud SQL Client).
- Cloud Run / Cloud Functions invocation uses OIDC ID-tokens signed by the service account; restrict
roles/run.Invoker to the service account when services are private.
- Only the tools you enable below will be available to the agent.
Use Select All or Deselect All to manage tools in bulk, or enable them individually. You can also toggle Require Confirmation per tool to prompt the user before the agent executes that action.
There are 13 tools available across four categories.
BigQuery
| Tool | Description |
|---|
| List Datasets | Lists BigQuery datasets accessible to the connected service account. |
| List Tables | Lists tables in a BigQuery dataset. |
| Get Table Schema | Inspects column names, types, descriptions, and table metadata. |
| Run Query | Runs a SQL query against BigQuery with optional dry-run, parameters, and row limit. |
| Insert Rows | Stream-inserts rows into a BigQuery table using the streaming insert API. |
Cloud Run
| Tool | Description |
|---|
| List Services | Lists Cloud Run services (Gen 2) in a region. |
| Get Service | Fetches a Cloud Run service definition including its URL and image. |
| Invoke Service | Invokes an HTTP endpoint of a Cloud Run service with an OIDC ID-token signed by the service account. |
| Invoke Function | Invokes an HTTP-triggered Cloud Run / Cloud Functions Gen 2 function with an OIDC ID-token. |
Cloud SQL
| Tool | Description |
|---|
| List Instances | Lists Cloud SQL instances (Postgres, MySQL, SQL Server) in a project. |
| Get Instance | Fetches metadata for a specific Cloud SQL instance (engine, IPs, version). |
| Execute Query | Runs a SQL query against a Cloud SQL instance via the Python connector. |
Generic
| Tool | Description |
|---|
| Custom API Call | Makes an authenticated request to any Google Cloud REST API. Use this when no dedicated tool exists for the operation you need. |
Saving Your Configuration
Click Save to apply your configuration, or Set as Default to make this configuration the default for new agents. To remove the toolkit from the agent entirely, click Remove Toolkit. 
