Skip to directory

About API keys MCP

Google Cloud managed MCP server for API keys. Exact tool names and accessible operations depend on the published server reference and configured Google Cloud permissions.

What you can use it for

  • Lists the API keys owned by a project, including their metadata and restrictions.
  • Gets the metadata for a specific API key. Does not return the key string itself.
  • Retrieves the actual secret API key string. Treat as highly sensitive.
  • Creates a new API key in the specified project. You can optionally specify restrictions.
  • Updates the metadata, restrictions, or display name of an existing API key.
  • Deletes an API key. The key can be restored using UndeleteKey within 30 days.
Connection and setup
Hosting
Google-managed remote
Transport
Streamable HTTP
Endpoint
https://apikeys.googleapis.com/mcp
Authentication
Google Cloud authentication: OAuth 2.0 using Application Default Credentials (ADC) in supported Google clients, or a client OAuth ID/secret or bearer token in compatible third-party clients. The principal needs mcp.tools.call plus the underlying product permissions; API key authentication is only available for services that explicitly support it.

Requirements

  • A Google Cloud project and access to the target product/resource.
  • Enable this MCP service and its underlying Google Cloud API as required by the product guide.
  • An MCP client that supports Streamable HTTP.
  • An identity with the MCP Tool User role (roles/mcp.toolUser) or equivalent mcp.tools.call permission, plus permissions for the underlying product operations.

Setup steps

  1. Choose the correct global or regional endpoint for your data location; this catalog lists the documented endpoint.
  2. In the Google Cloud project, enable the MCP service and the underlying product API if the product guide requires it.
  3. Authenticate the client with Google Cloud ADC (simplest with Antigravity/Gemini CLI) or configure OAuth 2.0 credentials in a compatible client.
  4. Grant the connecting identity roles/mcp.toolUser and only the product IAM roles needed for the intended operations.
  5. Add apikeys.googleapis.com to the client as a Streamable HTTP MCP server and complete sign-in.
  6. Refresh the client tool list and check that the tools match the product reference; availability may depend on permissions and selected toolset.
Tools 8

Google Cloud documents eight exact tools. `apikeys_get_key_string` retrieves the actual secret API key value; treat its output as highly sensitive. Create/update/delete/undelete/lookup operations affect key lifecycle and can break dependent applications. Google Cloud IAM applies.

  • apikeys_list_keys

    Lists the API keys owned by a project, including their metadata and restrictions.

    01
  • apikeys_get_key

    Gets the metadata for a specific API key. Does not return the key string itself.

    02
  • apikeys_get_key_string

    Retrieves the actual secret API key string. Treat as highly sensitive.

    03
  • apikeys_create_key

    Creates a new API key in the specified project. You can optionally specify restrictions.

    04
  • apikeys_update_key

    Updates the metadata, restrictions, or display name of an existing API key.

    05
  • apikeys_delete_key

    Deletes an API key. The key can be restored using UndeleteKey within 30 days.

    06
  • apikeys_undelete_key

    Restores an API key that was recently deleted.

    07
  • apikeys_lookup_key

    Finds the parent project and resource name of the API key that matches the key string in the request.

    08
Limitations and notes
  • Google marks this service Preview in its supported-products catalog.
Original sources
  • official server catalog

    Official Google Cloud catalog lists this product as an available remote MCP server.

  • official setup guide

    Google Cloud describes remote MCP client setup, Streamable HTTP transport, supported authentication options, and ADC setup.

  • official authentication guide

    Google documents supported identity types and authorization requirements for Google Cloud MCP calls.

  • official tool reference

    Current Google Cloud reference enumerates eight tools, endpoint and server setup; specifically states get_key_string returns the actual secret and describes deletion recovery.

Documentation checked 2026-10-28. Connection has not been runtime tested.

Similar tools