Connectors · Identity & security
Google Cloud IAM MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Google Cloud IAM and the rest of your systems. It gives your agent 188 Google Cloud IAM actions (85 reads, 71 writes and 32 that wait for a confirmation) and holds the Google Cloud IAM credential itself, so the agent never does. It paces Google Cloud IAM's limits and records every call. Connecting Google Cloud IAM needs your own Google Cloud IAM OAuth app and one admin sign-in.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "gcp_iam.roles.list", intent: "check which Google Cloud IAM account is connected"}# Roles: list · read · 1 upstream call- 188actionsin one signed file
- 85readlook, never change
- 71writecreate and update
- 32wait for a yesdestructive, confirmed first
Set up
Connect Google Cloud IAM in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Google Cloud IAM.
OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Google Cloud IAM, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. actionlake stores what you paste write-only, sealed under your tenant's key.
Before the first sign-in, Google Cloud IAM needs an OAuth app of your own, registered in its developer portal. actionlake has no Google Cloud IAM app to lend you.
access_tokenAccess token from one sign-in with your own OAuth apprefresh_tokenRefresh token from the same sign-in; the access token is renewed from itclient_idGoogle OAuth client id (Google Cloud console > APIs & Services > Credentials; enable the IAM API on the project)client_secretGoogle OAuth client secret
account { op: "connections.requirements", service: "gcp_iam" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "gcp_iam.roles.list" }# roles: list · read · 1 upstream callcheck { action: "gcp_iam.projects_service_accounts.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Google Cloud IAM at a glance
- Sign-in
- OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Google Cloud IAM, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on.
- You provide
access_tokenrefresh_tokenclient_idclient_secret- Limits we pace to
- 600 calls a minute, per connection
- API covered
- Google Cloud IAM (service accounts, keys, roles, workload and workforce identity, deny and access policies) API iam v1 + v2 + v3 (Discovery revision 20261016)
iam.googleapis.com - Built from
- Google Cloud IAM's documentation, read 23 October 2026iam.googleapis.comiam.googleapis.comiam.googleapis.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 67 of 85 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 2, so ask can line Google Cloud IAM up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Google Cloud IAM.
188 actions in 42 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 85readlook, never change
- 71writecreate and update
- 32destructivewait for a confirmation
Projects service accounts
144 read · 7 write · 3 destructive
Projects service accounts: list · Projects service accounts: create · Projects service accounts: get · Projects service accounts: patch
Projects locations workload identity pools
135 read · 6 write · 2 destructive
Projects locations workload identity pools: create · Projects locations workload identity pools: list · Projects locations workload identity pools: list attestation rules · Projects locations workload identity pools: test iam permissions
Projects locations workload identity pools namespaces managed identities
103 read · 6 write · 1 destructive
Projects locations workload identity pools namespaces managed identities: create · Projects locations workload identity pools namespaces managed identities: list · Projects locations workload identity pools namespaces managed identities: list attestation rules · Projects locations workload identity pools namespaces managed identities: add attestation rule
Locations workforce pools
94 read · 3 write · 2 destructive
Locations workforce pools: create · Locations workforce pools: list · Locations workforce pools: test iam permissions · Locations workforce pools: get
Locations workforce pools providers scim tenants
94 read · 3 write · 2 destructive
Locations workforce pools providers scim tenants: create · Locations workforce pools providers scim tenants: list · Locations workforce pools providers scim tenants: test iam permissions · Locations workforce pools providers scim tenants: get
Projects service accounts keys
72 read · 3 write · 2 destructive
Projects service accounts keys: create · Projects service accounts keys: list · Projects service accounts keys: upload · Projects service accounts keys: enable
Locations workforce pools providers
62 read · 3 write · 1 destructive
Locations workforce pools providers: create · Locations workforce pools providers: list · Locations workforce pools providers: get · Locations workforce pools providers: undelete
Organizations roles
62 read · 3 write · 1 destructive
Organizations roles: list · Organizations roles: create · Organizations roles: get · Organizations roles: patch
34 more areas · 114 actions
- Projects locations oauth clients 6
- Projects locations workload identity pools namespaces 6
- Projects locations workload identity pools providers 6
- Projects roles 6
- V3 folders locations access policies 6
- V3 folders locations policy bindings 6
- V3 organizations locations access policies 6
- V3 organizations locations policy bindings 6
- V3 organizations locations principal access boundary policies 6
- V3 projects locations access policies 6
- V3 projects locations policy bindings 6
- Locations workforce pools providers keys 5
- Locations workforce pools providers scim tenants tokens 5
- Projects locations oauth clients credentials 5
- Projects locations workload identity pools providers keys 5
- V2 policies 5
- Locations workforce pools subjects 3
- Roles 3
- IAM policies 2
- Locations workforce pools operations 1
- Locations workforce pools providers keys operations 1
- Locations workforce pools providers operations 1
- Locations workforce pools subjects operations 1
- Permissions 1
- Projects locations workload identity pools namespaces managed identities operations 1
- Projects locations workload identity pools namespaces managed identities workload sources operations 1
- Projects locations workload identity pools namespaces operations 1
- Projects locations workload identity pools operations 1
- Projects locations workload identity pools providers keys operations 1
- Projects locations workload identity pools providers operations 1
- V2 policies operations 1
- V3 folders locations operations 1
- V3 organizations locations operations 1
- V3 projects locations operations 1
Top actions
The Google Cloud IAM API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 10 of Google Cloud IAM's 10 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
gcp_iam.roles.listRoles: list | Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project. | read | identity.role.list184 connectors |
gcp_iam.projects_service_accounts.listProjects service accounts: list | Lists every ServiceAccount that belongs to a specific project. | read | identity.service_account.list35 connectors |
gcp_iam.projects_roles.listProjects roles: list | Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project. | read | identity.role.list184 connectors |
gcp_iam.projects_service_accounts.createProjects service accounts: create | Creates a ServiceAccount. | write | identity.service_account.create32 connectors |
gcp_iam.projects_roles.deleteProjects roles: delete | Deletes a custom Role. | destructive | identity.role.delete106 connectors |
gcp_iam.iam_policies.lint_policyIam policies: lint policy | Lints, or validates, an IAM policy. | read | this connector |
gcp_iam.v2_policies.create_policyPolicies: create policy | Creates a policy. | write | this connector |
gcp_iam.v2_policies.list_policiesPolicies: list policies | Retrieves the policies of the specified kind that are attached to a resource. | read | this connector |
gcp_iam.roles.query_grantable_rolesRoles: query grantable roles | Lists roles that can be granted on a Google Cloud resource. | read | this connector |
gcp_iam.iam_policies.query_auditable_servicesIam policies: query auditable services | Returns a list of services that allow you to opt into audit logs that are not generated by default. | read | this connector |
gcp_iam.permissions.query_testable_permissionsPermissions: query testable permissions | Lists every permission that you can test on a resource. | read | this connector |
gcp_iam.locations_workforce_pools.createLocations workforce pools: create | Creates a new WorkforcePool. | write | this connector |
Try it
Prompts to paste into Claude.
Each one names the Google Cloud IAM actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Roles: list in Google Cloud IAM and tell me what stands out.
calls
gcp_iam.roles.list - Writewrite
Projects service accounts: create in Google Cloud IAM. Show me exactly what you will send before you save it.
calls
gcp_iam.projects_service_accounts.create
Governance for Google Cloud IAM
Destructive actions wait for a yes.
32 Google Cloud IAM actions are destructive. The first 10:
- Projects roles: delete
gcp_iam.projects_roles.delete - Organizations roles: delete
gcp_iam.organizations_roles.delete - Projects service accounts: delete
gcp_iam.projects_service_accounts.delete - Policies: delete
gcp_iam.v2_policies.delete - Locations workforce pools: delete
gcp_iam.locations_workforce_pools.delete - Projects service accounts: disable
gcp_iam.projects_service_accounts.disable - Locations workforce pools: set iam policy
gcp_iam.locations_workforce_pools.set_iam_policy - Projects service accounts: set iam policy
gcp_iam.projects_service_accounts.set_iam_policy - Projects service accounts keys: delete
gcp_iam.projects_service_accounts_keys.delete - Projects service accounts keys: disable
gcp_iam.projects_service_accounts_keys.disable
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Projects roles: delete?
intent: the user asked me to projects roles: delete
account { op: "keys.create", name: "gcp-iam-agent", allowed_actions: ["gcp_iam.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "gcp_iam.projects_roles.delete", approver: "[email protected]" }, { match: "gcp_iam.organizations_roles.delete", approver: "[email protected]" }, { match: "gcp_iam.projects_service_accounts.delete", approver: "[email protected]" } ]}Cost
What Google Cloud IAM costs on actionlake.
Every Google Cloud IAM action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Google Cloud IAM refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 188 Google Cloud IAM actions
- 34actions pageeach page of a long list is one call
- 67reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Google Cloud IAM action.
188 actions by area: the id your agent calls, what it does, and its effect.
Projects service accounts14
gcp_iam.projects_service_accounts.createProjects service accounts: createwritegcp_iam.projects_service_accounts.deleteProjects service accounts: deletedestructivegcp_iam.projects_service_accounts.disableProjects service accounts: disabledestructivegcp_iam.projects_service_accounts.enableProjects service accounts: enablewritegcp_iam.projects_service_accounts.getProjects service accounts: getreadgcp_iam.projects_service_accounts.get_iam_policyProjects service accounts: get iam policyreadgcp_iam.projects_service_accounts.listProjects service accounts: listreadgcp_iam.projects_service_accounts.patchProjects service accounts: patchwritegcp_iam.projects_service_accounts.set_iam_policyProjects service accounts: set iam policydestructivegcp_iam.projects_service_accounts.sign_blobProjects service accounts: sign blobwritegcp_iam.projects_service_accounts.sign_jwtProjects service accounts: sign jwtwritegcp_iam.projects_service_accounts.test_iam_permissionsProjects service accounts: test iam permissionsreadgcp_iam.projects_service_accounts.undeleteProjects service accounts: undeletewritegcp_iam.projects_service_accounts.updateProjects service accounts: updatewrite
Projects locations workload identity pools13
gcp_iam.projects_locations_workload_identity_pools.add_attestation_ruleProjects locations workload identity pools: add attestation rulewritegcp_iam.projects_locations_workload_identity_pools.createProjects locations workload identity pools: createwritegcp_iam.projects_locations_workload_identity_pools.deleteProjects locations workload identity pools: deletedestructivegcp_iam.projects_locations_workload_identity_pools.getProjects locations workload identity pools: getreadgcp_iam.projects_locations_workload_identity_pools.get_iam_policyProjects locations workload identity pools: get iam policyreadgcp_iam.projects_locations_workload_identity_pools.listProjects locations workload identity pools: listreadgcp_iam.projects_locations_workload_identity_pools.list_attestation_rulesProjects locations workload identity pools: list attestation rulesreadgcp_iam.projects_locations_workload_identity_pools.patchProjects locations workload identity pools: patchwritegcp_iam.projects_locations_workload_identity_pools.remove_attestation_ruleProjects locations workload identity pools: remove attestation rulewritegcp_iam.projects_locations_workload_identity_pools.set_attestation_rulesProjects locations workload identity pools: set attestation ruleswritegcp_iam.projects_locations_workload_identity_pools.set_iam_policyProjects locations workload identity pools: set iam policydestructivegcp_iam.projects_locations_workload_identity_pools.test_iam_permissionsProjects locations workload identity pools: test iam permissionsreadgcp_iam.projects_locations_workload_identity_pools.undeleteProjects locations workload identity pools: undeletewrite
Projects locations workload identity pools namespaces managed identities10
gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.add_attestation_ruleProjects locations workload identity pools namespaces managed identities: add attestation rulewritegcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.createProjects locations workload identity pools namespaces managed identities: createwritegcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.deleteProjects locations workload identity pools namespaces managed identities: deletedestructivegcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.getProjects locations workload identity pools namespaces managed identities: getreadgcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.listProjects locations workload identity pools namespaces managed identities: listreadgcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.list_attestation_rulesProjects locations workload identity pools namespaces managed identities: list attestation rulesreadgcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.patchProjects locations workload identity pools namespaces managed identities: patchwritegcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.remove_attestation_ruleProjects locations workload identity pools namespaces managed identities: remove attestation rulewritegcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.set_attestation_rulesProjects locations workload identity pools namespaces managed identities: set attestation ruleswritegcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.undeleteProjects locations workload identity pools namespaces managed identities: undeletewrite
Locations workforce pools9
gcp_iam.locations_workforce_pools.createLocations workforce pools: createwritegcp_iam.locations_workforce_pools.deleteLocations workforce pools: deletedestructivegcp_iam.locations_workforce_pools.getLocations workforce pools: getreadgcp_iam.locations_workforce_pools.get_iam_policyLocations workforce pools: get iam policyreadgcp_iam.locations_workforce_pools.listLocations workforce pools: listreadgcp_iam.locations_workforce_pools.patchLocations workforce pools: patchwritegcp_iam.locations_workforce_pools.set_iam_policyLocations workforce pools: set iam policydestructivegcp_iam.locations_workforce_pools.test_iam_permissionsLocations workforce pools: test iam permissionsreadgcp_iam.locations_workforce_pools.undeleteLocations workforce pools: undeletewrite
Locations workforce pools providers scim tenants9
gcp_iam.locations_workforce_pools_providers_scim_tenants.createLocations workforce pools providers scim tenants: createwritegcp_iam.locations_workforce_pools_providers_scim_tenants.deleteLocations workforce pools providers scim tenants: deletedestructivegcp_iam.locations_workforce_pools_providers_scim_tenants.getLocations workforce pools providers scim tenants: getreadgcp_iam.locations_workforce_pools_providers_scim_tenants.get_iam_policyLocations workforce pools providers scim tenants: get iam policyreadgcp_iam.locations_workforce_pools_providers_scim_tenants.listLocations workforce pools providers scim tenants: listreadgcp_iam.locations_workforce_pools_providers_scim_tenants.patchLocations workforce pools providers scim tenants: patchwritegcp_iam.locations_workforce_pools_providers_scim_tenants.set_iam_policyLocations workforce pools providers scim tenants: set iam policydestructivegcp_iam.locations_workforce_pools_providers_scim_tenants.test_iam_permissionsLocations workforce pools providers scim tenants: test iam permissionsreadgcp_iam.locations_workforce_pools_providers_scim_tenants.undeleteLocations workforce pools providers scim tenants: undeletewrite
Projects service accounts keys7
gcp_iam.projects_service_accounts_keys.createProjects service accounts keys: createwritegcp_iam.projects_service_accounts_keys.deleteProjects service accounts keys: deletedestructivegcp_iam.projects_service_accounts_keys.disableProjects service accounts keys: disabledestructivegcp_iam.projects_service_accounts_keys.enableProjects service accounts keys: enablewritegcp_iam.projects_service_accounts_keys.getProjects service accounts keys: getreadgcp_iam.projects_service_accounts_keys.listProjects service accounts keys: listreadgcp_iam.projects_service_accounts_keys.uploadProjects service accounts keys: uploadwrite
Locations workforce pools providers6
gcp_iam.locations_workforce_pools_providers.createLocations workforce pools providers: createwritegcp_iam.locations_workforce_pools_providers.deleteLocations workforce pools providers: deletedestructivegcp_iam.locations_workforce_pools_providers.getLocations workforce pools providers: getreadgcp_iam.locations_workforce_pools_providers.listLocations workforce pools providers: listreadgcp_iam.locations_workforce_pools_providers.patchLocations workforce pools providers: patchwritegcp_iam.locations_workforce_pools_providers.undeleteLocations workforce pools providers: undeletewrite
Organizations roles6
gcp_iam.organizations_roles.createOrganizations roles: createwritegcp_iam.organizations_roles.deleteOrganizations roles: deletedestructivegcp_iam.organizations_roles.getOrganizations roles: getreadgcp_iam.organizations_roles.listOrganizations roles: listreadgcp_iam.organizations_roles.patchOrganizations roles: patchwritegcp_iam.organizations_roles.undeleteOrganizations roles: undeletewrite
Projects locations oauth clients6
gcp_iam.projects_locations_oauth_clients.createProjects locations oauth clients: createwritegcp_iam.projects_locations_oauth_clients.deleteProjects locations oauth clients: deletedestructivegcp_iam.projects_locations_oauth_clients.getProjects locations oauth clients: getreadgcp_iam.projects_locations_oauth_clients.listProjects locations oauth clients: listreadgcp_iam.projects_locations_oauth_clients.patchProjects locations oauth clients: patchwritegcp_iam.projects_locations_oauth_clients.undeleteProjects locations oauth clients: undeletewrite
Projects locations workload identity pools namespaces6
gcp_iam.projects_locations_workload_identity_pools_namespaces.createProjects locations workload identity pools namespaces: createwritegcp_iam.projects_locations_workload_identity_pools_namespaces.deleteProjects locations workload identity pools namespaces: deletedestructivegcp_iam.projects_locations_workload_identity_pools_namespaces.getProjects locations workload identity pools namespaces: getreadgcp_iam.projects_locations_workload_identity_pools_namespaces.listProjects locations workload identity pools namespaces: listreadgcp_iam.projects_locations_workload_identity_pools_namespaces.patchProjects locations workload identity pools namespaces: patchwritegcp_iam.projects_locations_workload_identity_pools_namespaces.undeleteProjects locations workload identity pools namespaces: undeletewrite
Projects locations workload identity pools providers6
gcp_iam.projects_locations_workload_identity_pools_providers.createProjects locations workload identity pools providers: createwritegcp_iam.projects_locations_workload_identity_pools_providers.deleteProjects locations workload identity pools providers: deletedestructivegcp_iam.projects_locations_workload_identity_pools_providers.getProjects locations workload identity pools providers: getreadgcp_iam.projects_locations_workload_identity_pools_providers.listProjects locations workload identity pools providers: listreadgcp_iam.projects_locations_workload_identity_pools_providers.patchProjects locations workload identity pools providers: patchwritegcp_iam.projects_locations_workload_identity_pools_providers.undeleteProjects locations workload identity pools providers: undeletewrite
Projects roles6
gcp_iam.projects_roles.createProjects roles: createwritegcp_iam.projects_roles.deleteProjects roles: deletedestructivegcp_iam.projects_roles.getProjects roles: getreadgcp_iam.projects_roles.listProjects roles: listreadgcp_iam.projects_roles.patchProjects roles: patchwritegcp_iam.projects_roles.undeleteProjects roles: undeletewrite
V3 folders locations access policies6
gcp_iam.v3_folders_locations_access_policies.createFolders locations access policies: createwritegcp_iam.v3_folders_locations_access_policies.deleteFolders locations access policies: deletedestructivegcp_iam.v3_folders_locations_access_policies.getFolders locations access policies: getreadgcp_iam.v3_folders_locations_access_policies.listFolders locations access policies: listreadgcp_iam.v3_folders_locations_access_policies.patchFolders locations access policies: patchwritegcp_iam.v3_folders_locations_access_policies.search_policy_bindingsFolders locations access policies: search policy bindingsread
V3 folders locations policy bindings6
gcp_iam.v3_folders_locations_policy_bindings.createFolders locations policy bindings: createwritegcp_iam.v3_folders_locations_policy_bindings.deleteFolders locations policy bindings: deletedestructivegcp_iam.v3_folders_locations_policy_bindings.getFolders locations policy bindings: getreadgcp_iam.v3_folders_locations_policy_bindings.listFolders locations policy bindings: listreadgcp_iam.v3_folders_locations_policy_bindings.patchFolders locations policy bindings: patchwritegcp_iam.v3_folders_locations_policy_bindings.search_target_policy_bindingsFolders locations policy bindings: search target policy bindingsread
V3 organizations locations access policies6
gcp_iam.v3_organizations_locations_access_policies.createOrganizations locations access policies: createwritegcp_iam.v3_organizations_locations_access_policies.deleteOrganizations locations access policies: deletedestructivegcp_iam.v3_organizations_locations_access_policies.getOrganizations locations access policies: getreadgcp_iam.v3_organizations_locations_access_policies.listOrganizations locations access policies: listreadgcp_iam.v3_organizations_locations_access_policies.patchOrganizations locations access policies: patchwritegcp_iam.v3_organizations_locations_access_policies.search_policy_bindingsOrganizations locations access policies: search policy bindingsread
V3 organizations locations policy bindings6
gcp_iam.v3_organizations_locations_policy_bindings.createOrganizations locations policy bindings: createwritegcp_iam.v3_organizations_locations_policy_bindings.deleteOrganizations locations policy bindings: deletedestructivegcp_iam.v3_organizations_locations_policy_bindings.getOrganizations locations policy bindings: getreadgcp_iam.v3_organizations_locations_policy_bindings.listOrganizations locations policy bindings: listreadgcp_iam.v3_organizations_locations_policy_bindings.patchOrganizations locations policy bindings: patchwritegcp_iam.v3_organizations_locations_policy_bindings.search_target_policy_bindingsOrganizations locations policy bindings: search target policy bindingsread
V3 organizations locations principal access boundary policies6
gcp_iam.v3_organizations_locations_principal_access_boundary_policies.createOrganizations locations principal access boundary policies: createwritegcp_iam.v3_organizations_locations_principal_access_boundary_policies.deleteOrganizations locations principal access boundary policies: deletedestructivegcp_iam.v3_organizations_locations_principal_access_boundary_policies.getOrganizations locations principal access boundary policies: getreadgcp_iam.v3_organizations_locations_principal_access_boundary_policies.listOrganizations locations principal access boundary policies: listreadgcp_iam.v3_organizations_locations_principal_access_boundary_policies.patchOrganizations locations principal access boundary policies: patchwritegcp_iam.v3_organizations_locations_principal_access_boundary_policies.search_policy_bindingsOrganizations locations principal access boundary policies: search policy bindingsread
V3 projects locations access policies6
gcp_iam.v3_projects_locations_access_policies.createProjects locations access policies: createwritegcp_iam.v3_projects_locations_access_policies.deleteProjects locations access policies: deletedestructivegcp_iam.v3_projects_locations_access_policies.getProjects locations access policies: getreadgcp_iam.v3_projects_locations_access_policies.listProjects locations access policies: listreadgcp_iam.v3_projects_locations_access_policies.patchProjects locations access policies: patchwritegcp_iam.v3_projects_locations_access_policies.search_policy_bindingsProjects locations access policies: search policy bindingsread
V3 projects locations policy bindings6
gcp_iam.v3_projects_locations_policy_bindings.createProjects locations policy bindings: createwritegcp_iam.v3_projects_locations_policy_bindings.deleteProjects locations policy bindings: deletedestructivegcp_iam.v3_projects_locations_policy_bindings.getProjects locations policy bindings: getreadgcp_iam.v3_projects_locations_policy_bindings.listProjects locations policy bindings: listreadgcp_iam.v3_projects_locations_policy_bindings.patchProjects locations policy bindings: patchwritegcp_iam.v3_projects_locations_policy_bindings.search_target_policy_bindingsProjects locations policy bindings: search target policy bindingsread
Locations workforce pools providers keys5
gcp_iam.locations_workforce_pools_providers_keys.createLocations workforce pools providers keys: createwritegcp_iam.locations_workforce_pools_providers_keys.deleteLocations workforce pools providers keys: deletedestructivegcp_iam.locations_workforce_pools_providers_keys.getLocations workforce pools providers keys: getreadgcp_iam.locations_workforce_pools_providers_keys.listLocations workforce pools providers keys: listreadgcp_iam.locations_workforce_pools_providers_keys.undeleteLocations workforce pools providers keys: undeletewrite
Locations workforce pools providers scim tenants tokens5
gcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.createLocations workforce pools providers scim tenants tokens: createwritegcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.deleteLocations workforce pools providers scim tenants tokens: deletedestructivegcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.getLocations workforce pools providers scim tenants tokens: getreadgcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.listLocations workforce pools providers scim tenants tokens: listreadgcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.patchLocations workforce pools providers scim tenants tokens: patchwrite
Projects locations oauth clients credentials5
gcp_iam.projects_locations_oauth_clients_credentials.createProjects locations oauth clients credentials: createwritegcp_iam.projects_locations_oauth_clients_credentials.deleteProjects locations oauth clients credentials: deletedestructivegcp_iam.projects_locations_oauth_clients_credentials.getProjects locations oauth clients credentials: getreadgcp_iam.projects_locations_oauth_clients_credentials.listProjects locations oauth clients credentials: listreadgcp_iam.projects_locations_oauth_clients_credentials.patchProjects locations oauth clients credentials: patchwrite
Projects locations workload identity pools providers keys5
gcp_iam.projects_locations_workload_identity_pools_providers_keys.createProjects locations workload identity pools providers keys: createwritegcp_iam.projects_locations_workload_identity_pools_providers_keys.deleteProjects locations workload identity pools providers keys: deletedestructivegcp_iam.projects_locations_workload_identity_pools_providers_keys.getProjects locations workload identity pools providers keys: getreadgcp_iam.projects_locations_workload_identity_pools_providers_keys.listProjects locations workload identity pools providers keys: listreadgcp_iam.projects_locations_workload_identity_pools_providers_keys.undeleteProjects locations workload identity pools providers keys: undeletewrite
V2 policies5
gcp_iam.v2_policies.create_policyPolicies: create policywritegcp_iam.v2_policies.deletePolicies: deletedestructivegcp_iam.v2_policies.getPolicies: getreadgcp_iam.v2_policies.list_policiesPolicies: list policiesreadgcp_iam.v2_policies.updatePolicies: updatewrite
Locations workforce pools subjects3
gcp_iam.locations_workforce_pools_subjects.deleteLocations workforce pools subjects: deletedestructivegcp_iam.locations_workforce_pools_subjects.revoke_sessionsLocations workforce pools subjects: revoke sessionsdestructivegcp_iam.locations_workforce_pools_subjects.undeleteLocations workforce pools subjects: undeletewrite
Roles3
gcp_iam.roles.getRoles: getreadgcp_iam.roles.listRoles: listreadgcp_iam.roles.query_grantable_rolesRoles: query grantable rolesread
IAM policies2
gcp_iam.iam_policies.lint_policyIam policies: lint policyreadgcp_iam.iam_policies.query_auditable_servicesIam policies: query auditable servicesread
Locations workforce pools operations1
gcp_iam.locations_workforce_pools_operations.getLocations workforce pools operations: getread
Locations workforce pools providers keys operations1
gcp_iam.locations_workforce_pools_providers_keys_operations.getLocations workforce pools providers keys operations: getread
Locations workforce pools providers operations1
gcp_iam.locations_workforce_pools_providers_operations.getLocations workforce pools providers operations: getread
Locations workforce pools subjects operations1
gcp_iam.locations_workforce_pools_subjects_operations.getLocations workforce pools subjects operations: getread
Permissions1
gcp_iam.permissions.query_testable_permissionsPermissions: query testable permissionsread
Projects locations workload identity pools namespaces managed identities operations1
gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities_operations.getProjects locations workload identity pools namespaces managed identities operations: getread
Projects locations workload identity pools namespaces managed identities workload sources operations1
gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities_workload_sources_operations.getProjects locations workload identity pools namespaces managed identities workload sources operations: getread
Projects locations workload identity pools namespaces operations1
gcp_iam.projects_locations_workload_identity_pools_namespaces_operations.getProjects locations workload identity pools namespaces operations: getread
Projects locations workload identity pools operations1
gcp_iam.projects_locations_workload_identity_pools_operations.getProjects locations workload identity pools operations: getread
Projects locations workload identity pools providers keys operations1
gcp_iam.projects_locations_workload_identity_pools_providers_keys_operations.getProjects locations workload identity pools providers keys operations: getread
Projects locations workload identity pools providers operations1
gcp_iam.projects_locations_workload_identity_pools_providers_operations.getProjects locations workload identity pools providers operations: getread
V2 policies operations1
gcp_iam.v2_policies_operations.getPolicies operations: getread
V3 folders locations operations1
gcp_iam.v3_folders_locations_operations.getFolders locations operations: getread
V3 organizations locations operations1
gcp_iam.v3_organizations_locations_operations.getOrganizations locations operations: getread
V3 projects locations operations1
gcp_iam.v3_projects_locations_operations.getProjects locations operations: getread
Questions
The Google Cloud IAM MCP server, answered.
Is there a Google Cloud IAM MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 188 Google Cloud IAM actions across projects service accounts, projects locations workload identity pools, projects locations workload identity pools namespaces managed identities and locations workforce pools, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Google Cloud IAM.
What do I need to connect Google Cloud IAM?
Your own Google Cloud IAM OAuth app, registered with Google Cloud IAM (its client id and client secret), and the access and refresh tokens from one admin sign-in. actionlake has no Google Cloud IAM app of its own, so this is not a one-step consent. actionlake renews the access token as it expires. The free call account { op: "connections.requirements", service: "gcp_iam" } lists exactly what to paste.
Can an AI agent delete or change things in Google Cloud IAM?
Only if its key allows it, and only with an explicit confirmation. 32 Google Cloud IAM actions are destructive, including projects roles: delete, organizations roles: delete and projects service accounts: delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Google Cloud IAM API limit?
actionlake paces every call to the limits in the Google Cloud IAM service file: 600 calls a minute per connection. Repeated reads are answered from cache (67 Google Cloud IAM actions can be), which never reaches Google Cloud IAM.
What does a Google Cloud IAM action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (34 Google Cloud IAM actions page). Cache hits, searches, dry runs and calls Google Cloud IAM refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Google Cloud IAM API does it cover?
The Google Cloud IAM (service accounts, keys, roles, workload and workforce identity, deny and access policies) API iam v1 + v2 + v3 (Discovery revision 20261016) at iam.googleapis.com. It is built from Google Cloud IAM's documentation as read on 23 October 2026. 188 actions in 42 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Google Cloud IAM data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Google Cloud IAM credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Google Cloud IAM today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
