Skip to directory

Organization Policy Service MCP

Google Cloud

Streamable HTTP12 documented tools0

About Organization Policy Service MCP

Google Cloud managed MCP server for Organization Policy Service. Exact tool names and accessible operations depend on the published server reference and configured Google Cloud permissions.

What you can use it for

  • Lists constraints that can be applied to a specific resource (project, folder, or organization). Use this to discover what constraints are available to enforce.
  • Retrieves all explicit policies set on a particular resource. Useful for auditing what policies are directly applied.
  • Gets a specific policy on a resource by name. Returns the policy details if set.
  • Gets the final, evaluated policy on a resource, taking into account inheritance from parent resources and conditions. Use this to see the actual enforcement state.
  • Creates a new policy on a resource to enforce specific constraints.
  • Updates an existing policy on a resource. Note that this performs a full overwrite of the policy.
Connection and setup
Hosting
Google-managed remote
Transport
Streamable HTTP
Endpoint
https://orgpolicy.googleapis.com/mcp
Authentication
Google Cloud authentication: OAuth 2.0 using Application Default Credentials (ADC) in supported Google clients, or a client OAuth ID/secret or bearer token in compatible third-party clients. The principal needs mcp.tools.call plus the underlying product permissions; API key authentication is only available for services that explicitly support it.

Requirements

  • A Google Cloud project and access to the target product/resource.
  • Enable this MCP service and its underlying Google Cloud API as required by the product guide.
  • An MCP client that supports Streamable HTTP.
  • An identity with the MCP Tool User role (roles/mcp.toolUser) or equivalent mcp.tools.call permission, plus permissions for the underlying product operations.

Setup steps

  1. Choose the correct global or regional endpoint for your data location; this catalog lists the documented endpoint.
  2. In the Google Cloud project, enable the MCP service and the underlying product API if the product guide requires it.
  3. Authenticate the client with Google Cloud ADC (simplest with Antigravity/Gemini CLI) or configure OAuth 2.0 credentials in a compatible client.
  4. Grant the connecting identity roles/mcp.toolUser and only the product IAM roles needed for the intended operations.
  5. Add orgpolicy.googleapis.com to the client as a Streamable HTTP MCP server and complete sign-in.
  6. Refresh the client tool list and check that the tools match the product reference; availability may depend on permissions and selected toolset.
Tools 12

12 tools inspect and mutate organization policies/custom constraints. Writes may enforce broad controls across org/folder/project and block operations; verify attachment, inheritance and constraints. OAuth/IAM required.

  • ListConstraints

    Lists constraints that can be applied to a specific resource (project, folder, or organization). Use this to discover what constraints are available to enforce.

    01
  • ListPolicies

    Retrieves all explicit policies set on a particular resource. Useful for auditing what policies are directly applied.

    02
  • GetPolicy

    Gets a specific policy on a resource by name. Returns the policy details if set.

    03
  • GetEffectivePolicy

    Gets the final, evaluated policy on a resource, taking into account inheritance from parent resources and conditions. Use this to see the actual enforcement state.

    04
  • CreatePolicy

    Creates a new policy on a resource to enforce specific constraints.

    05
  • UpdatePolicy

    Updates an existing policy on a resource. Note that this performs a full overwrite of the policy.

    06
  • DeletePolicy

    Deletes a policy from a resource, causing it to inherit policies from its parent or revert to the default constraint behavior.

    07
  • CreateCustomConstraint

    Creates a new custom constraint for an organization, allowing for fine-grained resource restriction using CEL.

    08
  • UpdateCustomConstraint

    Updates an existing custom constraint. Note that this performs a full overwrite.

    09
  • GetCustomConstraint

    Gets the definition of a custom or managed constraint by name.

    10
  • ListCustomConstraints

    Lists all custom constraints defined for an organization.

    11
  • DeleteCustomConstraint

    Deletes a custom constraint from an organization.

    12
Original sources
  • official tool reference

    Product-specific Google MCP reference publishes 12 exact tool identifiers and descriptions in its tools reference.

  • official server catalog

    Official Google Cloud catalog lists this product as an available remote MCP server.

  • official setup guide

    Google Cloud describes remote MCP client setup, Streamable HTTP transport, supported authentication options, and ADC setup.

  • official authentication guide

    Google documents supported identity types and authorization requirements for Google Cloud MCP calls.

  • official source

    Official Google Cloud MCP primary documentation checked 2026-10-28.

  • official source

    Official Google Cloud MCP primary documentation checked 2026-10-28.

Documentation checked 2026-10-28. Connection has not been runtime tested.

Similar tools