Atlas / MCP servers / krzko / Google Cloud

Google CloudSAFE

Name: Google Cloud
Author: krzko

mcp/krzko/google-cloud

MCP server by krzko · gcp · google · google cloud · Audited 2026-10-07

⚑ Report / re-scan Source ↗

🤖 A Model Context Protocol (MCP) server for Google Cloud (GCP)

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

40 38r · 2w · 0d

Transport

stdio

License

Apache-2.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A Model Context Protocol server that connects to Google Cloud services to provide context and tools for interacting with your Google Cloud resources.

Services

Supported Google Cloud services:

[x] Billing
[x] Error Reporting
[x] Identity and Access Management (IAM)
[x] Logging
[x] Monitoring
[x] Profiler
[x] Spanner
[x] Trace

Billing

Manage and analyse Google Cloud billing with cost optimisation insights:

Tools: gcp-billing-list-accounts, gcp-billing-get-account-details, gcp-billing-list-projects, gcp-billing-get-project-info, gcp-billing-list-services, gcp-billing-list-skus, gcp-billing-analyse-costs, gcp-billing-detect-anomalies, gcp-billing-cost-recommendations, gcp-billing-service-breakdown

Example prompts:

"Show me all my billing accounts"
"Analyse costs for project my-app-prod-123 for the last 30 days"
"Generate cost recommendations for billing account billingAccounts/123456-789ABC-DEF012"
"Check for billing anomalies in project my-ecommerce-456"

Error Reporting

Monitor and analyse application errors with automated investigation and remediation suggestions:

Tools: gcp-error-reporting-list-groups, gcp-error-reporting-get-group-details, gcp-error-reporting-analyse-trends

Example prompts:

"Show me error groups from project my-webapp-prod-789 for the last hour"
"Get details for error group projects/my-app-123/groups/xyz789"
"Analyse error trends for service m

Read from source at commit 362905660ef8OBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add google-cloud-mcp --env GOOGLE_APPLICATION_CREDENTIALS=${GOOGLE_APPLICATION_CREDENTIALS} --env GOOGLE_PRIVATE_KEY=${GOOGLE_PRIVATE_KEY} --env LAZY_AUTH=${LAZY_AUTH} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "google-cloud-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "GOOGLE_APPLICATION_CREDENTIALS": "${GOOGLE_APPLICATION_CREDENTIALS}",
        "GOOGLE_PRIVATE_KEY": "${GOOGLE_PRIVATE_KEY}",
        "LAZY_AUTH": "${LAZY_AUTH}"
      }
    }
  }
}

Exposed tools (40)

38 read · 2 write · 0 destructive.

Tool	Risk	Description
`gcp-billing-analyse-costs`	read
`gcp-billing-cost-recommendations`	read
`gcp-billing-detect-anomalies`	read
`gcp-billing-get-account-details`	read
`gcp-billing-get-project-info`	read
`gcp-billing-list-accounts`	read
`gcp-billing-list-projects`	read
`gcp-billing-list-services`	read
`gcp-billing-list-skus`	read
`gcp-billing-service-breakdown`	read
`gcp-error-reporting-analyse-trends`	read
`gcp-error-reporting-get-group-details`	read
`gcp-error-reporting-list-groups`	read
`gcp-iam-analyse-permission-gaps`	read
`gcp-iam-get-project-policy`	read
`gcp-iam-list-deployment-services`	read
`gcp-iam-test-project-permissions`	read
`gcp-iam-test-resource-permissions`	read
`gcp-iam-validate-deployment-permissions`	read
`gcp-logging-query-logs`	read
`gcp-logging-query-time-range`	read
`gcp-logging-search-comprehensive`	read
`gcp-monitoring-list-metric-types`	read
`gcp-monitoring-query-metrics`	read
`gcp-monitoring-query-natural-language`	read
`gcp-profiler-analyse-performance`	read
`gcp-profiler-compare-trends`	read
`gcp-profiler-list-profiles`	read
`gcp-spanner-execute-query`	write
`gcp-spanner-list-databases`	read
`gcp-spanner-list-instances`	read
`gcp-spanner-list-tables`	read
`gcp-spanner-query-count`	read
`gcp-spanner-query-natural-language`	read
`gcp-trace-find-from-logs`	read
`gcp-trace-get-trace`	read
`gcp-trace-list-traces`	read
`gcp-trace-query-natural-language`	read
`gcp-utils-get-project-id`	read
`gcp-utils-set-project-id`	write

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (5 observation(s))
Network: declared (5 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (15)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/services/billing/resources.ts:8

import { getProjectId } from "../../utils/auth.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/services/billing/resources.ts:9

import { stateManager } from "../../utils/state-manager.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/services/billing/resources.ts:10

import { GcpMcpError } from "../../utils/error.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/services/billing/resources.ts:11

import { logger } from "../../utils/logger.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/services/billing/tools.ts:6

import { getProjectId } from "../../utils/auth.js";

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@google-cloud/billing, @google-cloud/iam, @google-cloud/logging, @google-cloud/monitoring, @google-cloud/resource-manager, @google-cloud/spanner, @google-cloud/trace-agent, @modelcontextprotocol/sdk

Why it matters. 24 dependency range(s) float

Fix. pin exact versions or ship a lockfile

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

llms-full.txt:1660

* **Streamable HTTP transport**: Uses HTTP POST for client-to-server messages with optional Server-Sent Events for streaming capabilities. This transport enables remote server communication and suppor