Google Cloud Pub/Sub integration for AI agents.
Google Cloud Pub/Sub integration for AI agents with secure authentication and server-side credential injection. Open Connector runs the OAuth, seals the token in an encrypted vault, and serves Google Cloud Pub/Sub tools to your agent over MCP or a typed API — credentials injected server-side, every call audited, nothing leaving your infrastructure. Open source (AGPL-3.0) and self-hostable.
Real Google Cloud Pub/Sub actions, managed and audited.
Your user connects Google Cloud Pub/Sub once; your agent can then pub/Sub is Google's asynchronous and scalable messaging service for reliably exchanging events between applications — scoped to the OAuth permissions you grant and the tool allowlist you configure. Every action is least-privilege and written to a tamper-evident audit trail.
- 1
Your user grants Google Cloud Pub/Sub access once (OAuth) — the token lands in the vault.
- 2
Your agent calls a tool over MCP or the typed API; Open Connector injects the credential server-side.
- 3
Every routed call appends a hash-chained audit record — nothing leaves your infra.
Supported Google Cloud Pub/Sub tools.
15 tools are generated from the published Google Cloud Pub/Sub catalog. Descriptions are plain text; each action remains subject to its configured authentication and tool allowlist.
Showing 15 tools. All published catalog entries are included in this page's server-rendered HTML.
- Pubsub Projects Schemas Get
- Gets a schema.
- projects
- Pubsub Projects Schemas GetIamPolicy
- Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.
- projects
- Pubsub Projects Schemas List
- Lists schemas in a project.
- projects
- Pubsub Projects Schemas ListRevisions
- Lists all schema revisions for the named schema.
- projects
- Pubsub Projects Schemas TestIamPermissions
- Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a `NOT_FOUND` error. Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
- projects
- Pubsub Projects Schemas Validate
- Validates a schema.
- projects
- Pubsub Projects Schemas ValidateMessage
- Validates a message against a schema.
- projects
- Pubsub Projects Snapshots Get
- Gets the configuration details of a snapshot. Snapshots are used in [Seek](https://cloud.google.com/pubsub/docs/replay-overview) operations, which allow you to manage message acknowledgments in bulk. That is, you can set the acknowledgment state of messages in an existing subscription to the state captured by a snapshot.
- projects
- Pubsub Projects Snapshots List
- Lists the existing snapshots. Snapshots are used in [Seek]( https://cloud.google.com/pubsub/docs/replay-overview) operations, which allow you to manage message acknowledgments in bulk. That is, you can set the acknowledgment state of messages in an existing subscription to the state captured by a snapshot.
- projects
- Pubsub Projects Subscriptions Get
- Gets the configuration details of a subscription.
- projects
- Pubsub Projects Subscriptions List
- Lists matching subscriptions.
- projects
- Pubsub Projects Topics Get
- Gets the configuration of a topic.
- projects
- Pubsub Projects Topics List
- Lists matching topics.
- projects
- Pubsub Projects Topics Snapshots List
- Lists the names of the snapshots on this topic. Snapshots are used in [Seek](https://cloud.google.com/pubsub/docs/replay-overview) operations, which allow you to manage message acknowledgments in bulk. That is, you can set the acknowledgment state of messages in an existing subscription to the state captured by a snapshot.
- projects
- Pubsub Projects Topics Subscriptions List
- Lists the names of the attached subscriptions on this topic.
- projects
Google Cloud Pub/Sub integration, answered
- How do AI agents use Google Cloud Pub/Sub through Open Connector?
- Your user connects Google Cloud Pub/Sub once with one of its cataloged authentication methods. Open Connector stores the credential in an encrypted vault and exposes Google Cloud Pub/Sub tools to your agent over MCP or a typed API, with credentials injected server-side on each call.
- Is this a Google Cloud Pub/Sub MCP server?
- Yes. Open Connector can serve Google Cloud Pub/Sub as a named MCP server with a scoped allowlist and a per-user connection URL, so any MCP client can call Google Cloud Pub/Sub actions with credentials injected server-side.
- Where do Google Cloud Pub/Sub credentials live?
- In your own infrastructure. Open Connector keeps credentials in its own vault and injects them at call time, so they never leave your environment.
Give your agents Google Cloud Pub/Sub — keep the keys.
Open source, self-hostable, with Google Cloud Pub/Sub credentials that never leave your infrastructure. Run it from source today.