Google Cloud IAM for AI agents.
Google Cloud IAM integration for AI agents with secure authentication and server-side credential injection. Open Connector runs the OAuth, seals the token in an encrypted vault, and serves Google Cloud IAM tools to your agent over MCP or a typed API — credentials injected server-side, every call audited, nothing leaving your infrastructure. Open source (AGPL-3.0) and self-hostable.
# Add your Open Connector MCP server (per-user mcp_url)
$ claude mcp add --transport http \
open-connector <your mcp_url>
# Then ask: “open an issue for the launch checklist”// .cursor/mcp.json
{
"mcpServers": {
"open-connector": { "url": "<your mcp_url>" }
}
}const composio = new Composio({
apiKey: "oc_…",
baseURL: "https://connect.acme.com", // your host
});
await composio.tools.proxy({ … });{
"tool": "GOOGLE_CLOUD_IAM_IAM_POLICIES_LINT_POLICY",
"arguments": { … }
}What your agents can do
Real Google Cloud IAM actions, managed and audited.
Your user connects Google Cloud IAM once; your agent can then list service accounts and keys, list roles and workload identity pools, and validate policies — scoped to the OAuth permissions you grant and the tool allowlist you configure. Every action is least-privilege and written to a tamper-evident audit trail.
- 01Connect
Your user grants Google Cloud IAM access once (OAuth) — the token lands in the vault.
- 02Call
Your agent calls a tool over MCP or the typed API; Open Connector injects the credential server-side.
- 03Audit
Every routed call appends a hash-chained audit record — nothing leaves your infra.
Tools & triggers
Supported Google Cloud IAM tools.
Browse 19 tools in the Google Cloud IAM catalog. Each action uses your configured authentication and tool allowlist.
Showing 19 tools.
- Iam IamPolicies LintPolicy
- GOOGLE_CLOUD_IAM_IAM_POLICIES_LINT_POLICY
- Lints, or validates, an IAM policy. Currently checks the google.iam.v1.Binding.condition field, which contains a condition expression for a role binding. Successful calls to this method always return an HTTP `200 OK` status code, even if the linter detects an issue in the IAM policy.
- iampolicies
- Iam Locations WorkforcePools List
- GOOGLE_CLOUD_IAM_LOCATIONS_WORKFORCE_POOLS_LIST
- Lists all non-deleted WorkforcePools under the specified parent. If `show_deleted` is set to `true`, then deleted pools are also listed.
- locations
- Iam Locations WorkforcePools Providers ScimTenants List
- GOOGLE_CLOUD_IAM_LOCATIONS_WORKFORCE_POOLS_PROVIDERS_SCIM_TENANTS_LIST
- Gemini Enterprise only. Lists all non-deleted WorkforcePoolProviderScimTenants in a WorkforcePoolProvider. If `show_deleted` is set to `true`, then deleted SCIM tenants are also listed.
- locations
- Iam Locations WorkforcePools Providers ScimTenants Tokens List
- GOOGLE_CLOUD_IAM_LOCATIONS_WORKFORCE_POOLS_PROVIDERS_SCIM_TENANTS_TOKENS_LIST
- Gemini Enterprise only. Lists all non-deleted WorkforcePoolProviderScimTokenss in a WorkforcePoolProviderScimTenant. If `show_deleted` is set to `true`, then deleted SCIM tokens are also listed.
- locations
- Iam Permissions QueryTestablePermissions
- GOOGLE_CLOUD_IAM_PERMISSIONS_QUERY_TESTABLE_PERMISSIONS
- Lists every permission that you can test on a resource. A permission is testable if you can check whether a principal has that permission on the resource.
- permissions
- Iam Projects Locations OauthClients List
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_OAUTH_CLIENTS_LIST
- Lists all non-deleted OauthClients in a project. If `show_deleted` is set to `true`, then deleted OauthClients are also listed.
- projects
- Iam Projects Locations WorkloadIdentityPools GetIamPolicy
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_GET_IAM_POLICY
- Gets the IAM policy of a WorkloadIdentityPool.
- projects
- Iam Projects Locations WorkloadIdentityPools List
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_LIST
- Lists all non-deleted WorkloadIdentityPools in a project. If `show_deleted` is set to `true`, then deleted pools are also listed.
- projects
- Iam Projects Locations WorkloadIdentityPools Namespaces List
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_NAMESPACES_LIST
- Lists all non-deleted WorkloadIdentityPoolNamespaces in a workload identity pool. If `show_deleted` is set to `true`, then deleted namespaces are also listed.
- projects
- Iam Projects Locations WorkloadIdentityPools Namespaces ManagedIdentities List
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_NAMESPACES_MANAGED_IDENTITIES_LIST
- Lists all non-deleted WorkloadIdentityPoolManagedIdentitys in a namespace. If `show_deleted` is set to `true`, then deleted managed identities are also listed.
- projects
- Iam Projects Locations WorkloadIdentityPools Namespaces ManagedIdentities ListAttestationRules
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_NAMESPACES_MANAGED_IDENTITIES_LIST_ATTESTATION_RULES
- List all AttestationRule on a WorkloadIdentityPoolManagedIdentity.
- projects
- Iam Projects Locations WorkloadIdentityPools Providers Keys List
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_PROVIDERS_KEYS_LIST
- Lists all non-deleted WorkloadIdentityPoolProviderKeys in a project. If show_deleted is set to `true`, then deleted pools are also listed.
- projects
- Iam Projects Locations WorkloadIdentityPools Providers List
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_PROVIDERS_LIST
- Lists all non-deleted WorkloadIdentityPoolProviders in a WorkloadIdentityPool. If `show_deleted` is set to `true`, then deleted providers are also listed.
- projects
- Iam Projects Locations WorkloadIdentityPools TestIamPermissions
- GOOGLE_CLOUD_IAM_PROJECTS_LOCATIONS_WORKLOAD_IDENTITY_POOLS_TEST_IAM_PERMISSIONS
- Returns the caller's permissions on a WorkloadIdentityPool
- projects
- Iam Projects Roles List
- GOOGLE_CLOUD_IAM_PROJECTS_ROLES_LIST
- Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project.
- projects
- Iam Projects ServiceAccounts Keys List
- GOOGLE_CLOUD_IAM_PROJECTS_SERVICE_ACCOUNTS_KEYS_LIST
- Lists every ServiceAccountKey for a service account.
- projects
- Iam Projects ServiceAccounts List
- GOOGLE_CLOUD_IAM_PROJECTS_SERVICE_ACCOUNTS_LIST
- Lists every ServiceAccount that belongs to a specific project.
- projects
- Iam Roles List
- GOOGLE_CLOUD_IAM_ROLES_LIST
- Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project.
- roles
- Iam Roles QueryGrantableRoles
- GOOGLE_CLOUD_IAM_ROLES_QUERY_GRANTABLE_ROLES
- Lists roles that can be granted on a Google Cloud resource. A role is grantable if the IAM policy for the resource can contain bindings to the role.
- roles
FAQ
Google Cloud IAM integration, answered
- How do AI agents use Google Cloud IAM through Open Connector?
- Your user connects Google Cloud IAM once with one of its cataloged authentication methods. Open Connector stores the credential in an encrypted vault and exposes Google Cloud IAM tools to your agent over MCP or a typed API, with credentials injected server-side on each call.
- Is this a Google Cloud IAM MCP server?
- Yes. Open Connector can serve Google Cloud IAM as a named MCP server with a scoped allowlist and a per-user connection URL, so any MCP client can call Google Cloud IAM actions with credentials injected server-side.
- Where do Google Cloud IAM credentials live?
- In your own infrastructure. Open Connector keeps credentials in its own vault and injects them at call time, so they never leave your environment.
Give your agents Google Cloud IAM — keep the keys.
Open source, self-hostable, with Google Cloud IAM credentials that never leave your infrastructure. Run it from source today.