Prerequisites
Before configuring the GCP Toolkit, you need an active Google Cloud connection. If you haven’t set one up yet, go to Settings → Connections to create one.Connections are managed centrally in Settings → Connections. The service-account JSON is stored encrypted; only the
client_email and project are surfaced to agents.Adding the Toolkit to an Agent
- Open your agent and go to Toolkits.
- Find Google Cloud Platform and click Add to Agent.
- Click Configure to open the configuration panel.
Configuration
Connection
Use the Select GCP Connection dropdown to choose the service account connection the agent will use. To manage or create connections, click Manage Connections in the upper right.About Google Cloud Integration
Keep the following in mind when configuring the toolkit:- The agent inherits the service account’s IAM roles — grant only the roles required (e.g.
BigQuery Data Viewer,Cloud Run Invoker,Cloud SQL Client). - Cloud Run / Cloud Functions invocation uses OIDC ID-tokens signed by the service account; restrict
roles/run.Invokerto the service account when services are private. - Only the tools you enable below will be available to the agent.