Skip to main content
The Google Cloud Platform (GCP) Toolkit enables your agent to interact with BigQuery, Cloud Run (services and HTTP-triggered functions), and Cloud SQL. Authentication is handled via a service-account JSON key stored as a connection — the agent acts as the service account and inherits its IAM roles.

Prerequisites

Before configuring the GCP Toolkit, you need an active Google Cloud connection. If you haven’t set one up yet, go to Settings → Connections to create one.
Connections are managed centrally in Settings → Connections. The service-account JSON is stored encrypted; only the client_email and project are surfaced to agents.

Adding the Toolkit to an Agent

  1. Open your agent and go to Toolkits.
  2. Find Google Cloud Platform and click Add to Agent.
  3. Click Configure to open the configuration panel.

Configuration

Connection

Use the Select GCP Connection dropdown to choose the service account connection the agent will use. To manage or create connections, click Manage Connections in the upper right.

About Google Cloud Integration

Keep the following in mind when configuring the toolkit:
  • The agent inherits the service account’s IAM roles — grant only the roles required (e.g. BigQuery Data Viewer, Cloud Run Invoker, Cloud SQL Client).
  • Cloud Run / Cloud Functions invocation uses OIDC ID-tokens signed by the service account; restrict roles/run.Invoker to the service account when services are private.
  • Only the tools you enable below will be available to the agent.

Select Tools

Use Select All or Deselect All to manage tools in bulk, or enable them individually. You can also toggle Require Confirmation per tool to prompt the user before the agent executes that action. There are 13 tools available across four categories.

BigQuery

Cloud Run

Cloud SQL

Generic

Saving Your Configuration

Click Save to apply your configuration, or Set as Default to make this configuration the default for new agents. To remove the toolkit from the agent entirely, click Remove Toolkit.