Google Cloud

Compute, storage, IAM and the Google Cloud API surface.

Cloud and infrastructure

How an agent reaches it

MCPREST APICLI

OAuth

API key

Create a service account with least-privilege roles and download its JSON key.
The JSON key is NOT a bearer token. Store it as a file credential and use the CLI lane, or exchange it for a token first.

list projects	GET https://cloudresourcemanager.googleapis.com/v1/projects
list buckets	GET https://storage.googleapis.com/storage/v1/b?project={id}

A service-account JSON must be exchanged for an access token before any HTTP call works.
Each product is a separate googleapis.com subdomain with its own versioned path.
APIs must be explicitly ENABLED on the project or every call 403s with a link to enable it.

Compute, storage, IAM and the Google Cloud API surface.

Cloud and infrastructure

MCPREST APICLI

OAuth

API key

Create a service account with least-privilege roles and download its JSON key.
The JSON key is NOT a bearer token. Store it as a file credential and use the CLI lane, or exchange it for a token first.

list projects	GET https://cloudresourcemanager.googleapis.com/v1/projects
list buckets	GET https://storage.googleapis.com/storage/v1/b?project={id}

A service-account JSON must be exchanged for an access token before any HTTP call works.
Each product is a separate googleapis.com subdomain with its own versioned path.
APIs must be explicitly ENABLED on the project or every call 403s with a link to enable it.