Skip to directory

Security Command Center MCP

Google Cloud

Streamable HTTP5 documented tools0

About Security Command Center MCP

Google Cloud managed MCP server for Security Command Center. Exact tool names and accessible operations depend on the published server reference and configured Google Cloud permissions.

Connection and setup
Hosting
Google-managed remote
Transport
Streamable HTTP
Endpoint
https://securitycenter.googleapis.com/mcp/investigate
Authentication
Google Cloud authentication: OAuth 2.0 using Application Default Credentials (ADC) in supported Google clients, or a client OAuth ID/secret or bearer token in compatible third-party clients. The principal needs mcp.tools.call plus the underlying product permissions; API key authentication is only available for services that explicitly support it.

Requirements

  • A Google Cloud project and access to the target product/resource.
  • Enable this MCP service and its underlying Google Cloud API as required by the product guide.
  • An MCP client that supports Streamable HTTP.
  • An identity with the MCP Tool User role (roles/mcp.toolUser) or equivalent mcp.tools.call permission, plus permissions for the underlying product operations.

Setup steps

  1. Choose the correct global or regional endpoint for your data location; this catalog lists the documented endpoint.
  2. In the Google Cloud project, enable the MCP service and the underlying product API if the product guide requires it.
  3. Authenticate the client with Google Cloud ADC (simplest with Antigravity/Gemini CLI) or configure OAuth 2.0 credentials in a compatible client.
  4. Grant the connecting identity roles/mcp.toolUser and only the product IAM roles needed for the intended operations.
  5. Add securitycenter.googleapis.com to the client as a Streamable HTTP MCP server and complete sign-in.
  6. Refresh the client tool list and check that the tools match the product reference; availability may depend on permissions and selected toolset.
Tools 5

Five Preview investigate tools read/analyze SCC findings, sources and attack paths. Security posture data is sensitive; scope carefully. SCC service-management tools belong to its separate Management MCP.

  • group_findings

    Officially listed group_findings tool.

    01
  • list_findings

    Officially listed list_findings tool.

    02
  • get_source

    Officially listed get_source tool.

    03
  • list_sources

    Officially listed list_sources tool.

    04
  • list_attack_paths

    Officially listed list_attack_paths tool.

    05
Limitations and notes
  • Google marks this service Preview in its supported-products catalog.
Original sources
  • official setup guide

    Google Cloud describes remote MCP client setup, Streamable HTTP transport, supported authentication options, and ADC setup.

  • official authentication guide

    Google documents supported identity types and authorization requirements for Google Cloud MCP calls.

  • official source

    Official Google primary MCP reference checked 2026-10-28.

  • official source

    Official Google primary MCP reference checked 2026-10-28.

Documentation checked 2026-10-28. Connection has not been runtime tested.

Similar tools