Back to search
C
60 /100

@google-cloud/gcloud-mcp

Author googleapis
Scanned 73d ago

Model Context Protocol (MCP) Server for interacting with GCP APIs

Versions

@google-cloud/storage-mcp
0.6.0
May 6, 2026
0.5.1
Apr 28, 2026
0.5.0
Apr 11, 2026
0.4.0
Apr 9, 2026
0.3.3
Feb 11, 2026
+ show 4 moreshow less
0.3.2
Jan 5, 2026
0.3.1
Dec 15, 2025
0.3.0
Nov 13, 2025
0.2.0
Nov 3, 2025
@google-cloud/backupdr-mcp
0.1.0
Mar 4, 2026
@google-cloud/observability-mcp
0.2.3
Feb 11, 2026
0.2.2
Jan 5, 2026
0.2.1
Dec 15, 2025
0.2.0
Nov 13, 2025
0.1.2
Sep 30, 2025
+ show 2 moreshow less
0.1.1
Sep 10, 2025
0.1.0
Sep 9, 2025
@google-cloud/gcloud-mcp
0.5.3scored
Jan 5, 2026
0.5.2
Dec 16, 2025
0.5.1
Dec 16, 2025
0.5.0
Dec 15, 2025
0.4.0
Oct 28, 2025
+ show 4 moreshow less
0.3.0
Oct 8, 2025
0.2.0
Sep 29, 2025
0.1.1
Sep 10, 2025
0.1.0
Sep 9, 2025

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 50

write_object
annotations: none low

Writes a new object to the bucket.

delete_object
annotations: none low

Deletes a specific object.

copy_object
annotations: none low

Copies an object from one bucket to another or within the same bucket.

read_object_content
annotations: none low

Reads the content of a specific object.

update_object_metadata
annotations: none low

Updates the metadata of an existing object.

upload_object_safe
annotations: none low

Uploads a file to a GCS bucket. Fails if the object already exists.

check_iam_permissions
annotations: none low

Tests IAM permissions for a bucket.

list_objects
annotations: none low

Lists the names of objects in a Google Cloud Storage (GCS) bucket. Supports filtering by prefix, directory-like listing with a delimiter, pagination, and listing object versions.

read_object_metadata
annotations: none low

Reads metadata for a specific object.

run_gcloud_command
annotations: none low

Executes a gcloud command. ## Instructions: - Use this tool to execute a single gcloud command at a time. - Use this tool when you are confident about the exact gcloud command needed to fulfill the user's request. - Prioritize this tool over any other to directly execute gcloud commands. - Assume all necessary APIs are already enabled. Do not proactively try to enable any APIs. - Do not use this tool to execute command chaining or command sequencing -- it will fail. - Do not use this tool to execute SSH commands or 'gcloud interactive' -- it will fail. - Always include all required parameters. - Ensure parameter values match the expected format. - You may choose to select specific columns using '--format=json(part.key, part.key2)'. - Use --filter to match based on resource (or 'row'), prioritizing ':' for pattern matching and never quoting the right side of the colon in filters. - When using the filter flag, treat the entire filter flag as a singular string. Do not quote or escape any character in the filter string. - You may access nested data directly with projections like '--format=json(part.key)' and use '.basename()' for URL fields. - Retrieve only necessary information for the user intent. Utilize projection capability of '--format' reduce data size. - If the exact JSON key path for formatting or filtering is unknown, run 'gcloud ... --limit=1 --format=json' to discover it. - If you receive zero results while using a projection or filter: Consider whether the project/filter syntax may be incorrect. ## Adhere to the following restrictions: - **No command substitution**: Do not use subshells or command substitution (e.g., $(...)) - **No pipes**: Do not use pipes (i.e., |) or any other shell-specific operators - **No redirection**: Do not use redirection operators (e.g., >, >>, <)

args array
csql_restore
annotations: none low

Restores a Cloud SQL backup to a Cloud SQL instance.

get_csql_operation
annotations: none low

Gets the status of a Cloud SQL operation.

get_backup
annotations: none low

Gets a backup.

get_backupdr_operation
annotations: none low

Gets the status of a BackupDR operation.

delete_backup
annotations: none low

Deletes a backup.

restore_backup
annotations: none low

Restores a Backup resource to a target environment. Supports Compute Instances and Disks.

list_backups
annotations: none low

Lists all backups for a given data source in a backup vault.

list_backup_vaults
annotations: none low

Lists all backup vaults in a given project and location.

get_backup_vault
annotations: none low

Gets a backup vault.

create_backup_vault
annotations: none low

Creates a new backup vault.

delete_backup_vault
annotations: none low

Deletes a backup vault.

get_backup_plan_association
annotations: none low

Gets a backup plan association.

delete_backup_plan_association
annotations: none low

Deletes a backup plan association.

trigger_backup
annotations: none low

Triggers a backup for a given backup plan association.

create_backup_plan_association
annotations: none low

Creates a new backup plan association.

list_backup_plan_associations
annotations: none low

Lists all backup plan associations for a given backup plan.

list_datasources
annotations: none low

Lists all data sources in a given backup vault.

get_datasource
annotations: none low

Gets a data source.

create_backup_plan
annotations: none low

Creates a new backup plan.

get_backup_plan
annotations: none low

Gets a backup plan.

list_backup_plans
annotations: none low

Lists all backup plans in a given project and location.

delete_backup_plan
annotations: none low

Deletes a backup plan.

update_backup_plan
annotations: none low

Updates a backup plan.

find_protectable_resources
annotations: none low

Lists protectable resources in a project. This includes Cloud SQL instances, Compute VMs, and Compute Disks.

list_resource_backup_configs
annotations: none low

Lists all resource backup configs in a given project and location.

execute_insights_query
annotations: none low

Executes a BigQuery SQL query against an insights dataset and returns the result.

get_metadata_table_schema
annotations: none low

Checks if GCS insights service is enabled and returns the BigQuery table schema for a given insights dataset configuration in JSON format. Also returns hints for each column in the table

list_insights_configs
annotations: none low

Lists the names of all Storage Insights dataset configurations for a given project.

copy_object_safe
annotations: none low

Copies an object to a new destination. Fails if an object already exists at the destination.

download_object
annotations: none low

Downloads an object from GCS to a local file.

move_object
annotations: none low

Moves an object from one bucket to another or renames it within the same bucket by copying and deleting the original.

upload_object
annotations: none low

Uploads a file to a GCS bucket.

write_object_safe
annotations: none low

Writes a new object to the bucket. Fails if the object already exists.

update_bucket_labels
annotations: none low

Updates labels for a bucket.

get_bucket_location
annotations: none low

Gets the location and storage class of a bucket.

view_iam_policy
annotations: none low

Views the IAM policy for a bucket.

delete_bucket
annotations: none low

Deletes a bucket.

create_bucket
annotations: none low

Creates a new bucket with specified configuration.

get_bucket_metadata
annotations: none low

Gets detailed metadata for a specific bucket.

list_buckets
annotations: none low

Lists all GCS buckets in the project.

Permissions 3

filesystem Server uses filesystem capabilities via: fs sync ops
low
shell Server uses shell capabilities via: child_process, execSync(), spawn()
high
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 126

low
Tool 'run_gcloud_command' has no annotations annotation_checker · 100%
low
Tool 'csql_restore' has no annotations annotation_checker · 100%
low
Tool 'get_csql_operation' has no annotations annotation_checker · 100%
low
Tool 'get_backup' has no annotations annotation_checker · 100%
low
Tool 'get_backupdr_operation' has no annotations annotation_checker · 100%
low
Tool 'delete_backup' has no annotations annotation_checker · 100%
low
Tool 'restore_backup' has no annotations annotation_checker · 100%
low
Tool 'list_backups' has no annotations annotation_checker · 100%
low
Tool 'list_backup_vaults' has no annotations annotation_checker · 100%
low
Tool 'get_backup_vault' has no annotations annotation_checker · 100%
low
Tool 'create_backup_vault' has no annotations annotation_checker · 100%
low
Tool 'delete_backup_vault' has no annotations annotation_checker · 100%
low
Tool 'get_backup_plan_association' has no annotations annotation_checker · 100%
low
Tool 'delete_backup_plan_association' has no annotations annotation_checker · 100%
low
Tool 'trigger_backup' has no annotations annotation_checker · 100%
low
Tool 'create_backup_plan_association' has no annotations annotation_checker · 100%
low
Tool 'list_backup_plan_associations' has no annotations annotation_checker · 100%
low
Tool 'list_datasources' has no annotations annotation_checker · 100%
low
Tool 'get_datasource' has no annotations annotation_checker · 100%
low
Tool 'create_backup_plan' has no annotations annotation_checker · 100%
low
Tool 'get_backup_plan' has no annotations annotation_checker · 100%
low
Tool 'list_backup_plans' has no annotations annotation_checker · 100%
low
Tool 'delete_backup_plan' has no annotations annotation_checker · 100%
low
Tool 'update_backup_plan' has no annotations annotation_checker · 100%
low
Tool 'find_protectable_resources' has no annotations annotation_checker · 100%
low
Tool 'list_resource_backup_configs' has no annotations annotation_checker · 100%
low
Tool 'execute_insights_query' has no annotations annotation_checker · 100%
low
Tool 'get_metadata_table_schema' has no annotations annotation_checker · 100%
low
Tool 'list_insights_configs' has no annotations annotation_checker · 100%
low
Tool 'copy_object_safe' has no annotations annotation_checker · 100%
low
Tool 'download_object' has no annotations annotation_checker · 100%
low
Tool 'move_object' has no annotations annotation_checker · 100%
low
Tool 'upload_object' has no annotations annotation_checker · 100%
low
Tool 'list_objects' has no annotations annotation_checker · 100%
low
Tool 'read_object_metadata' has no annotations annotation_checker · 100%
low
Tool 'write_object_safe' has no annotations annotation_checker · 100%
low
Tool 'write_object' has no annotations annotation_checker · 100%
low
Tool 'delete_object' has no annotations annotation_checker · 100%
low
Tool 'copy_object' has no annotations annotation_checker · 100%
low
Tool 'read_object_content' has no annotations annotation_checker · 100%
low
Tool 'update_object_metadata' has no annotations annotation_checker · 100%
low
Tool 'upload_object_safe' has no annotations annotation_checker · 100%
low
Tool 'check_iam_permissions' has no annotations annotation_checker · 100%
low
Tool 'update_bucket_labels' has no annotations annotation_checker · 100%
low
Tool 'get_bucket_location' has no annotations annotation_checker · 100%
low
Tool 'view_iam_policy' has no annotations annotation_checker · 100%
low
Tool 'delete_bucket' has no annotations annotation_checker · 100%
low
Tool 'create_bucket' has no annotations annotation_checker · 100%
low
Tool 'get_bucket_metadata' has no annotations annotation_checker · 100%
low
Tool 'list_buckets' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.8.13 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.8.13 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@latest (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.40.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Buffer.from base64 in googleapis-gcloud-mcp-238728f/packages/storage-mcp/tests/integration/gcs-mime-type.test.ts:104 entropy_analyzer · 75%
medium
Buffer.from base64 in googleapis-gcloud-mcp-238728f/packages/storage-mcp/src/tools/objects/write_object.test.ts:60 entropy_analyzer · 75%
medium
Buffer.from base64 in googleapis-gcloud-mcp-238728f/packages/storage-mcp/src/tools/objects/write_object_safe.ts:41 entropy_analyzer · 75%
medium
Buffer.from base64 in googleapis-gcloud-mcp-238728f/packages/storage-mcp/src/tools/objects/write_object.ts:40 entropy_analyzer · 75%
medium
Buffer.from base64 in googleapis-gcloud-mcp-238728f/packages/storage-mcp/src/tools/objects/write_object_safe.test.ts:56 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: run_gcloud_command manifest_parser · 85%
info
Tool: csql_restore manifest_parser · 85%
info
Tool: get_csql_operation manifest_parser · 85%
info
Tool: get_backup manifest_parser · 85%
info
Tool: get_backupdr_operation manifest_parser · 85%
info
Tool: delete_backup manifest_parser · 85%
info
Tool: restore_backup manifest_parser · 85%
info
Tool: list_backups manifest_parser · 85%
info
Tool: list_backup_vaults manifest_parser · 85%
info
Tool: get_backup_vault manifest_parser · 85%
info
Tool: create_backup_vault manifest_parser · 85%
info
Tool: delete_backup_vault manifest_parser · 85%
info
Tool: get_backup_plan_association manifest_parser · 85%
info
Tool: delete_backup_plan_association manifest_parser · 85%
info
Tool: trigger_backup manifest_parser · 85%
info
Tool: create_backup_plan_association manifest_parser · 85%
info
Tool: list_backup_plan_associations manifest_parser · 85%
info
Tool: list_datasources manifest_parser · 85%
info
Tool: get_datasource manifest_parser · 85%
info
Tool: create_backup_plan manifest_parser · 85%
info
Tool: get_backup_plan manifest_parser · 85%
info
Tool: list_backup_plans manifest_parser · 85%
info
Tool: delete_backup_plan manifest_parser · 85%
info
Tool: update_backup_plan manifest_parser · 85%
info
Tool: find_protectable_resources manifest_parser · 85%
info
Tool: list_resource_backup_configs manifest_parser · 85%
info
Tool: execute_insights_query manifest_parser · 85%
info
Tool: get_metadata_table_schema manifest_parser · 85%
info
Tool: list_insights_configs manifest_parser · 85%
info
Tool: copy_object_safe manifest_parser · 85%
info
Tool: download_object manifest_parser · 85%
info
Tool: move_object manifest_parser · 85%
info
Tool: upload_object manifest_parser · 85%
info
Tool: list_objects manifest_parser · 85%
info
Tool: read_object_metadata manifest_parser · 85%
info
Tool: write_object_safe manifest_parser · 85%
info
Tool: write_object manifest_parser · 85%
info
Tool: delete_object manifest_parser · 85%
info
Tool: copy_object manifest_parser · 85%
info
Tool: read_object_content manifest_parser · 85%
info
Tool: update_object_metadata manifest_parser · 85%
info
Tool: upload_object_safe manifest_parser · 85%
info
Tool: check_iam_permissions manifest_parser · 85%
info
Tool: update_bucket_labels manifest_parser · 85%
info
Tool: get_bucket_location manifest_parser · 85%
info
Tool: view_iam_policy manifest_parser · 85%
info
Tool: delete_bucket manifest_parser · 85%
info
Tool: create_bucket manifest_parser · 85%
info
Tool: get_bucket_metadata manifest_parser · 85%
info
Tool: list_buckets manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'run_gcloud_command': Cross-tool suppression poisoning · 85%
info
SBOM generated: 684 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%