# Audit Manager MCP
> Google Cloud managed MCP server for Audit Manager. Exact tool names and accessible operations depend on the published server reference and configured Google Cloud permissions.
Canonical: https://www.mcpfolio.com/servers/google-cloud-audit-manager
Last updated: 2026-10-28
## Catalog record

- Publisher: Google Cloud
- Categories: cloud-service, cloud-storage

## Website

https://docs.cloud.google.com/audit-manager/docs/reference/auditmanager/mcp

## Transports

Streamable HTTP

## Authentication

Google Cloud authentication: OAuth 2.0 using Application Default Credentials (ADC) in supported Google clients, or a client OAuth ID/secret or bearer token in compatible third-party clients. The principal needs mcp.tools.call plus the underlying product permissions; API key authentication is only available for services that explicitly support it.

## Tools

- **enroll_resource**: Enrolls a project in Audit Manager. This enables auditing capabilities and allows specifying eligible Cloud Storage buckets (for example, gs://... ) where generated reports can be uploaded. Format: 'projects/{project}/locations/{location}'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1).
- **get_resource_enrollment_status**: Fetches the enrollment status for a project in Audit Manager. Format: 'projects/{project}/locations/{location}/resourceEnrollmentStatuses/-'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1).
- **generate_audit_report**: Registers a report generation request for a compliance framework. Returns a long-running operation ID. Scope format: 'projects/{project}/locations/{location}'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1). Framework format: 'organizations/{org}/locations/{location}/frameworks/{id}' or 'projects/{project}/locations/{location}/frameworks/{id}'. Example IDs: 'builtin-aipp', 'builtin-security-essentials'. If 'complianceFramework' is unknown, prompt the user for it. Suggest they list frameworks using: 'gcloud compliance-manager frameworks list --project={project} --location=global' or 'gcloud compliance-manager frameworks list --organization={organization_id} --location=global'
- **get_audit_report**: Gets the full metadata of an audit report and its control level summary. Format: 'projects/{project}/locations/{location}/auditReports/{auditReportId}'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1).
- **list_audit_reports**: Lists the audit reports for the specified parent scope. Format: 'projects/{project}/locations/{location}'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1). Filter or review the returned list of audit reports as needed based on the user's request.
- **generate_audit_scope_report**: Generates an audit scope report for the given compliance framework. Based on assets present in the selected scope and predefined compliance checks for given compliance controls, this generates an audit task breakdown against required compliance controls. Scope format: 'projects/{project}/locations/{location}'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1). Framework format: 'organizations/{org}/locations/{location}/frameworks/{id}' or 'projects/{project}/locations/{location}/frameworks/{id}'. Example IDs: 'builtin-aipp', 'builtin-security-essentials'. If 'complianceFramework' is unknown, prompt the user for it. Suggest they list frameworks using: 'gcloud compliance-manager frameworks list --project={project} --location=global' or 'gcloud compliance-manager frameworks list --organization={organization_id} --location=global'
- **get_operation**: Gets the latest state of a long-running operation (e.g., returned by 'generate_audit_report'). Use this to poll the operation returned by generate_audit_report . Format: 'projects/{project}/locations/{location}/operationIds/{operation_id}'. CRITICAL: For {location}, use the location specified by the user. If no location is specified, prompt the user to provide one. Do not use 'global'. The location must match the chosen regional endpoint (REP) region (for example, us-central1). CRITICAL: The generate_audit_report tool returns operations with /operations/ in the response. Ensure to replace /operations/ with /operationIds/ before calling this tool.

## Sources

- [official_tool_reference](https://docs.cloud.google.com/audit-manager/docs/reference/auditmanager/mcp)
- [official_server_catalog](https://docs.cloud.google.com/mcp/supported-products)
- [official_setup_guide](https://docs.cloud.google.com/mcp/configure-mcp-ai-application)
- [official_authentication_guide](https://docs.cloud.google.com/mcp/authenticate-mcp)
- [official_setup_and_safety_guide](https://docs.cloud.google.com/audit-manager/docs/use-audit-manager-mcp)
- [official_tool_schema](https://docs.cloud.google.com/audit-manager/docs/reference/auditmanager/mcp/tools_list/enroll_resource)

## Setup

Use the interactive setup panel on [the detail page](https://www.mcpfolio.com/servers/google-cloud-audit-manager) to view instructions for each supported client.