> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/integrations/resource-integrations/agentic-gateway/mcp-server/gcp.md).

# GCP MCP server

The **GCP** MCP servers are predefined servers that expose Google Cloud APIs to P0-managed agents behind the [P0 AI Gateway](/readme/agentic-control-plane.md), each wired up with P0's access controls. P0 ships one server per Google Cloud service, so you install only the services your agents need.

Agents call these services without ever holding Google Cloud credentials: the gateway obtains a short-lived, policy-scoped token for each session using Workload Identity Federation, backed by a [GCP Workload Identity Federation](/integrations/resource-integrations/google-cloud/gcp-wif.md) provider. Access is granted per session and governed by your P0 policy; no long-lived Google Cloud credentials are issued.

{% hint style="info" %}
The GCP MCP servers are a preview feature. Contact P0 to enable them for your organization.
{% endhint %}

## Available servers

| Server                                                                                                          | Exposes                                                               |
| --------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------- |
| [Compute Engine MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/compute.md)      | Compute Engine resources such as VM instances, disks, and networks.   |
| [Cloud Storage MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/storage.md)       | Cloud Storage buckets and objects.                                    |
| [BigQuery MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/bigquery.md)           | BigQuery datasets, tables, and jobs.                                  |
| [Cloud Monitoring MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/monitoring.md) | Cloud Monitoring metrics, alerting policies, and dashboards.          |
| [IAM MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/iam.md)                     | Identity and Access Management service accounts, roles, and policies. |

## Prerequisites

Every GCP MCP server shares the same prerequisites:

* A registered [Gateway](/integrations/resource-integrations/agentic-gateway/gateway.md) component, with the gateway deployed in your environment.
* A [GCP Workload Identity Federation](/integrations/resource-integrations/google-cloud/gcp-wif.md) provider installed on the Google Cloud project you want agents to reach. This provides the federated identity each GCP MCP server uses as its credential provider. It requires the base [Google Cloud integration](/integrations/resource-integrations/google-cloud.md) with IAM management installed on the same project.

## Configure a GCP MCP server

Every GCP MCP server follows the shared [Add an MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server.md#add-an-mcp-server) flow. On the configuration screen you choose **GCP WIF federation** as the credential source and select the predefined definition for the service you want.

{% hint style="info" %}
A Federation provider maps one-to-one to a single Google Cloud project. To give agents access to more than one project, configure a separate MCP server for each project, using that project's GCP Workload Identity Federation provider as its Federation provider.
{% endhint %}

The service-specific configuration and the roles agents can request differ by server. Continue to the page for the server you are installing:

* [Compute Engine MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/compute.md)
* [Cloud Storage MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/storage.md)
* [BigQuery MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/bigquery.md)
* [Cloud Monitoring MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/monitoring.md)
* [IAM MCP server](/integrations/resource-integrations/agentic-gateway/mcp-server/gcp/iam.md)

## Next steps

* Define the MCP roles and policies that determine which agents and users may call each GCP MCP server, and what they may do in Google Cloud.