Skip to directory

About Policy Assist MCP

Google Cloud managed MCP server for Policy Assist. Exact tool names and accessible operations depend on the published server reference and configured Google Cloud permissions.

What you can use it for

  • This tool returns IAM role suggestions based on the intent of a user's prompt. Example prompt: 'What role do I need to read Google Cloud Storage buckets?'
Connection and setup
Hosting
Google-managed remote
Transport
Streamable HTTP
Endpoint
https://policyassist.googleapis.com/mcp
Authentication
Google Cloud authentication: OAuth 2.0 using Application Default Credentials (ADC) in supported Google clients, or a client OAuth ID/secret or bearer token in compatible third-party clients. The principal needs mcp.tools.call plus the underlying product permissions; API key authentication is only available for services that explicitly support it.

Requirements

  • A Google Cloud project and access to the target product/resource.
  • Enable this MCP service and its underlying Google Cloud API as required by the product guide.
  • An MCP client that supports Streamable HTTP.
  • An identity with the MCP Tool User role (roles/mcp.toolUser) or equivalent mcp.tools.call permission, plus permissions for the underlying product operations.

Setup steps

  1. Choose the correct global or regional endpoint for your data location; this catalog lists the documented endpoint.
  2. In the Google Cloud project, enable the MCP service and the underlying product API if the product guide requires it.
  3. Authenticate the client with Google Cloud ADC (simplest with Antigravity/Gemini CLI) or configure OAuth 2.0 credentials in a compatible client.
  4. Grant the connecting identity roles/mcp.toolUser and only the product IAM roles needed for the intended operations.
  5. Add policyassist.googleapis.com to the client as a Streamable HTTP MCP server and complete sign-in.
  6. Refresh the client tool list and check that the tools match the product reference; availability may depend on permissions and selected toolset.
Tools 1

One Preview tool suggests IAM roles from a requested task/use case; it does not grant roles. Suggestions are guidance and should be checked for least privilege. Requires OAuth with the policyassist scope and Google Cloud IAM.

  • recommend_iam_roles

    This tool returns IAM role suggestions based on the intent of a user's prompt. Example prompt: 'What role do I need to read Google Cloud Storage buckets?'

    01
Limitations and notes
  • Google marks this service Preview in its supported-products catalog.
Original sources
  • official tool reference

    Product-specific Google MCP reference publishes 1 exact tool identifiers and descriptions in its tools reference.

  • official setup guide

    Google Cloud describes remote MCP client setup, Streamable HTTP transport, supported authentication options, and ADC setup.

  • official authentication guide

    Google documents supported identity types and authorization requirements for Google Cloud MCP calls.

  • official source

    Official Google Cloud primary MCP documentation checked 2026-10-28.

  • official source

    Official Google Cloud primary MCP documentation checked 2026-10-28.

Documentation checked 2026-10-28. Connection has not been runtime tested.

Similar tools