Back to integrations

Google Cloud integration for background agents

Enable Google-hosted MCP access for Google Cloud services.

Book a demo

Integration details

Connection

  • Hosted MCP via Google OAuth

Agent actions

Cloud Logging

  • list_log_entries

    Search and retrieve Cloud Logging entries by resource, severity, timestamp, text content, and other Logging query filters.

  • list_log_names

    List log names available in a Google Cloud project.

  • get_bucket

    Get details for a specific Cloud Logging log bucket.

  • list_buckets

    List Cloud Logging log buckets in a Google Cloud project.

  • get_view

    Get details for a specific view on a Cloud Logging bucket.

  • list_views

    List views configured on a Cloud Logging bucket.

Cloud Run

  • get_service

    Get Cloud Run service details, including service URI and deployment status.

  • list_services

    List Cloud Run services in a Google Cloud project and region.

  • deploy_service_from_image

    Deploy a container image from Artifact Registry or Docker Hub as a Cloud Run service.

  • deploy_service_from_archive

    Deploy a Cloud Run service from a self-contained source archive stored in Cloud Storage.

  • deploy_service_from_file_contents

    Deploy a Cloud Run service from inlined source files for quick development feedback loops.

Cloud Storage

  • list_buckets

    List Cloud Storage buckets in a Google Cloud project.

  • list_objects

    List objects in a Cloud Storage bucket.

  • create_bucket

    Create a Cloud Storage bucket in a project.

  • delete_bucket

    Delete a Cloud Storage bucket from a project.

  • read_text

    Deprecated Cloud Storage text-object reader; use read_object.

  • read_object

    Read text or binary object content from Cloud Storage, subject to the MCP server size limit.

  • write_text

    Write text content to a Cloud Storage object, overwriting existing content.

  • delete_object

    Delete an object from Cloud Storage.

  • get_object_metadata

    Get metadata for a Cloud Storage object.

Cloud Resource Manager

  • search_projects

    Search Google Cloud projects by access, parent, project ID, labels, display name, or lifecycle state.

Google Kubernetes Engine

  • list_k8s_api_resources

    List available Kubernetes API groups and resources for a GKE cluster.

  • check_k8s_auth

    Check whether a Kubernetes action is allowed for a resource in a GKE cluster.

  • describe_k8s_resource

    Describe a Kubernetes resource in a GKE cluster.

  • list_k8s_events

    List Kubernetes events from a GKE cluster.

  • get_k8s_resource

    Get Kubernetes resources from a GKE cluster as YAML, filtered by type, name, namespace, or labels.

  • get_k8s_cluster_info

    Get endpoint information for a GKE cluster.

  • get_k8s_version

    Get Kubernetes client and server versions.

  • get_k8s_rollout_status

    Check rollout status for a Kubernetes resource.

  • list_clusters

    List GKE clusters in a project and location.

  • create_cluster

    Create a GKE cluster.

  • update_cluster

    Update a GKE cluster.

  • get_cluster

    Get details for a GKE cluster.

  • list_operations

    List GKE operations in a project and location.

  • get_operation

    Get details for a GKE operation.

  • cancel_operation

    Cancel a GKE operation.

  • create_node_pool

    Create a node pool for a GKE cluster.

  • list_node_pools

    List node pools for a GKE cluster.

  • get_node_pool

    Get details for a GKE node pool.

  • update_node_pool

    Update a GKE node pool.

  • get_k8s_logs

    Get logs from a Kubernetes container in a pod.

  • apply_k8s_manifest

    Apply a Kubernetes manifest with server-side apply.

  • delete_k8s_resource

    Delete a Kubernetes resource from a GKE cluster.

  • patch_k8s_resource

    Patch a Kubernetes resource in a GKE cluster.

Credential safety

Credential-less sandboxes

Mistle lets agents access connected services without placing provider credentials inside the sandbox. Approved outbound requests are routed through Mistle's credential proxy, where authentication happens outside the agent runtime.

Credentials stay encrypted in Mistle's control plane and are applied only when a request is authorized for the calling sandbox and organization.

Read the credential-less sandboxes article
Diagram showing sandbox traffic routed through an egress proxy before credential injection.