--- title: "Google Cloud IAM MCP server for AI agents - actionlake" description: "Give Claude 188 Google Cloud IAM actions through one MCP server: projects service accounts. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/google-cloud-iam updated: 2026-10-23 --- Connectors · Identity & security # Google Cloud IAM MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Google Cloud IAM and the rest of your systems. It gives your agent 188 Google Cloud IAM actions (85 reads, 71 writes and 32 that wait for a confirmation) and holds the Google Cloud IAM credential itself, so the agent never does. It paces Google Cloud IAM's limits and records every call. Connecting Google Cloud IAM needs your own Google Cloud IAM OAuth app and one admin sign-in. [Connect Google Cloud IAM free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "gcp_iam.roles.list", intent: "check which Google Cloud IAM account is connected" } # Roles: list · read · 1 upstream call ``` - 188 actions in one signed file - 85 read look, never change - 71 write create and update - 32 wait for a yes destructive, confirmed first Set up ## Connect Google Cloud IAM in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Google Cloud IAM. OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Google Cloud IAM, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. actionlake stores what you paste write-only, sealed under your tenant's key. Before the first sign-in, Google Cloud IAM needs an OAuth app of your own, registered in its developer portal. actionlake has no Google Cloud IAM app to lend you. - `access_token` Access token from one sign-in with your own OAuth app - `refresh_token` Refresh token from the same sign-in; the access token is renewed from it - `client_id` Google OAuth client id (Google Cloud console > APIs & Services > Credentials; enable the IAM API on the project) - `client_secret` Google OAuth client secret ``` account { op: "connections.requirements", service: "gcp_iam" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "gcp_iam.roles.list" } # roles: list · read · 1 upstream call check { action: "gcp_iam.projects_service_accounts.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Google Cloud IAM at a glance **Sign-in** OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Google Cloud IAM, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. **You provide** `access_token` `refresh_token` `client_id` `client_secret` **Limits we pace to** 600 calls a minute, per connection **API covered** Google Cloud IAM (service accounts, keys, roles, workload and workforce identity, deny and access policies) API iam v1 + v2 + v3 (Discovery revision 20261016)`iam.googleapis.com` **Built from** Google Cloud IAM's documentation, read 23 October 2026[iam.googleapis.com](https://iam.googleapis.com/$discovery/rest?version=v1) [iam.googleapis.com](https://iam.googleapis.com/$discovery/rest?version=v2) [iam.googleapis.com](https://iam.googleapis.com/$discovery/rest?version=v3) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 67 of 85 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line Google Cloud IAM up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Google Cloud IAM. 188 actions in 42 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **85** read look, never change - **71** write create and update - **32** destructive wait for a confirmation 1. ### Projects service accounts 14 4 read · 7 write · 3 destructive Projects service accounts: list · Projects service accounts: create · Projects service accounts: get · Projects service accounts: patch 2. ### Projects locations workload identity pools 13 5 read · 6 write · 2 destructive Projects locations workload identity pools: create · Projects locations workload identity pools: list · Projects locations workload identity pools: list attestation rules · Projects locations workload identity pools: test iam permissions 3. ### Projects locations workload identity pools namespaces managed identities 10 3 read · 6 write · 1 destructive Projects locations workload identity pools namespaces managed identities: create · Projects locations workload identity pools namespaces managed identities: list · Projects locations workload identity pools namespaces managed identities: list attestation rules · Projects locations workload identity pools namespaces managed identities: add attestation rule 4. ### Locations workforce pools 9 4 read · 3 write · 2 destructive Locations workforce pools: create · Locations workforce pools: list · Locations workforce pools: test iam permissions · Locations workforce pools: get 5. ### Locations workforce pools providers scim tenants 9 4 read · 3 write · 2 destructive Locations workforce pools providers scim tenants: create · Locations workforce pools providers scim tenants: list · Locations workforce pools providers scim tenants: test iam permissions · Locations workforce pools providers scim tenants: get 6. ### Projects service accounts keys 7 2 read · 3 write · 2 destructive Projects service accounts keys: create · Projects service accounts keys: list · Projects service accounts keys: upload · Projects service accounts keys: enable 7. ### Locations workforce pools providers 6 2 read · 3 write · 1 destructive Locations workforce pools providers: create · Locations workforce pools providers: list · Locations workforce pools providers: get · Locations workforce pools providers: undelete 8. ### Organizations roles 6 2 read · 3 write · 1 destructive Organizations roles: list · Organizations roles: create · Organizations roles: get · Organizations roles: patch **34 more areas · 114 actions** - Projects locations oauth clients **6** - Projects locations workload identity pools namespaces **6** - Projects locations workload identity pools providers **6** - Projects roles **6** - V3 folders locations access policies **6** - V3 folders locations policy bindings **6** - V3 organizations locations access policies **6** - V3 organizations locations policy bindings **6** - V3 organizations locations principal access boundary policies **6** - V3 projects locations access policies **6** - V3 projects locations policy bindings **6** - Locations workforce pools providers keys **5** - Locations workforce pools providers scim tenants tokens **5** - Projects locations oauth clients credentials **5** - Projects locations workload identity pools providers keys **5** - V2 policies **5** - Locations workforce pools subjects **3** - Roles **3** - IAM policies **2** - Locations workforce pools operations **1** - Locations workforce pools providers keys operations **1** - Locations workforce pools providers operations **1** - Locations workforce pools subjects operations **1** - Permissions **1** - Projects locations workload identity pools namespaces managed identities operations **1** - Projects locations workload identity pools namespaces managed identities workload sources operations **1** - Projects locations workload identity pools namespaces operations **1** - Projects locations workload identity pools operations **1** - Projects locations workload identity pools providers keys operations **1** - Projects locations workload identity pools providers operations **1** - V2 policies operations **1** - V3 folders locations operations **1** - V3 organizations locations operations **1** - V3 projects locations operations **1** Top actions ## The Google Cloud IAM API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 10 of Google Cloud IAM's 10 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `gcp_iam.roles.list` Roles: list | Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project. | read | `identity.role.list` 184 connectors | | `gcp_iam.projects_service_accounts.list` Projects service accounts: list | Lists every ServiceAccount that belongs to a specific project. | read | `identity.service_account.list` 35 connectors | | `gcp_iam.projects_roles.list` Projects roles: list | Lists every predefined Role that IAM supports, or every custom role that is defined for an organization or project. | read | `identity.role.list` 184 connectors | | `gcp_iam.projects_service_accounts.create` Projects service accounts: create | Creates a ServiceAccount. | write | `identity.service_account.create` 32 connectors | | `gcp_iam.projects_roles.delete` Projects roles: delete | Deletes a custom Role. | destructive | `identity.role.delete` 106 connectors | | `gcp_iam.iam_policies.lint_policy` Iam policies: lint policy | Lints, or validates, an IAM policy. | read | this connector | | `gcp_iam.v2_policies.create_policy` Policies: create policy | Creates a policy. | write | this connector | | `gcp_iam.v2_policies.list_policies` Policies: list policies | Retrieves the policies of the specified kind that are attached to a resource. | read | this connector | | `gcp_iam.roles.query_grantable_roles` Roles: query grantable roles | Lists roles that can be granted on a Google Cloud resource. | read | this connector | | `gcp_iam.iam_policies.query_auditable_services` Iam policies: query auditable services | Returns a list of services that allow you to opt into audit logs that are not generated by default. | read | this connector | | `gcp_iam.permissions.query_testable_permissions` Permissions: query testable permissions | Lists every permission that you can test on a resource. | read | this connector | | `gcp_iam.locations_workforce_pools.create` Locations workforce pools: create | Creates a new WorkforcePool. | write | this connector | Try it ## Prompts to paste into Claude. Each one names the Google Cloud IAM actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Roles: list in Google Cloud IAM and tell me what stands out. calls `gcp_iam.roles.list` 2. Write write Projects service accounts: create in Google Cloud IAM. Show me exactly what you will send before you save it. calls `gcp_iam.projects_service_accounts.create` Governance for Google Cloud IAM ## Destructive actions wait for a yes. 32 Google Cloud IAM actions are destructive. The first 10: - Projects roles: delete `gcp_iam.projects_roles.delete` - Organizations roles: delete `gcp_iam.organizations_roles.delete` - Projects service accounts: delete `gcp_iam.projects_service_accounts.delete` - Policies: delete `gcp_iam.v2_policies.delete` - Locations workforce pools: delete `gcp_iam.locations_workforce_pools.delete` - Projects service accounts: disable `gcp_iam.projects_service_accounts.disable` - Locations workforce pools: set iam policy `gcp_iam.locations_workforce_pools.set_iam_policy` - Projects service accounts: set iam policy `gcp_iam.projects_service_accounts.set_iam_policy` - Projects service accounts keys: delete `gcp_iam.projects_service_accounts_keys.delete` - Projects service accounts keys: disable `gcp_iam.projects_service_accounts_keys.disable` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do gcp_iam.projects_roles.delete confirm_policy: **human** Projects roles: delete? **intent:** the user asked me to projects roles: delete run suspended · waiting for a named person · key _gcp-iam-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "gcp-iam-agent", allowed_actions: ["gcp_iam.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "gcp_iam.projects_roles.delete", approver: "lead@example.com" }, { match: "gcp_iam.organizations_roles.delete", approver: "lead@example.com" }, { match: "gcp_iam.projects_service_accounts.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Google Cloud IAM only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Google Cloud IAM costs on actionlake. Every Google Cloud IAM action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Google Cloud IAM refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 188 Google Cloud IAM actions - 34 actions page each page of a long list is one call - 67 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Google Cloud IAM action. 188 actions by area: the id your agent calls, what it does, and its effect. **Projects service accounts 14** - `gcp_iam.projects_service_accounts.create` Projects service accounts: create write - `gcp_iam.projects_service_accounts.delete` Projects service accounts: delete destructive - `gcp_iam.projects_service_accounts.disable` Projects service accounts: disable destructive - `gcp_iam.projects_service_accounts.enable` Projects service accounts: enable write - `gcp_iam.projects_service_accounts.get` Projects service accounts: get read - `gcp_iam.projects_service_accounts.get_iam_policy` Projects service accounts: get iam policy read - `gcp_iam.projects_service_accounts.list` Projects service accounts: list read - `gcp_iam.projects_service_accounts.patch` Projects service accounts: patch write - `gcp_iam.projects_service_accounts.set_iam_policy` Projects service accounts: set iam policy destructive - `gcp_iam.projects_service_accounts.sign_blob` Projects service accounts: sign blob write - `gcp_iam.projects_service_accounts.sign_jwt` Projects service accounts: sign jwt write - `gcp_iam.projects_service_accounts.test_iam_permissions` Projects service accounts: test iam permissions read - `gcp_iam.projects_service_accounts.undelete` Projects service accounts: undelete write - `gcp_iam.projects_service_accounts.update` Projects service accounts: update write **Projects locations workload identity pools 13** - `gcp_iam.projects_locations_workload_identity_pools.add_attestation_rule` Projects locations workload identity pools: add attestation rule write - `gcp_iam.projects_locations_workload_identity_pools.create` Projects locations workload identity pools: create write - `gcp_iam.projects_locations_workload_identity_pools.delete` Projects locations workload identity pools: delete destructive - `gcp_iam.projects_locations_workload_identity_pools.get` Projects locations workload identity pools: get read - `gcp_iam.projects_locations_workload_identity_pools.get_iam_policy` Projects locations workload identity pools: get iam policy read - `gcp_iam.projects_locations_workload_identity_pools.list` Projects locations workload identity pools: list read - `gcp_iam.projects_locations_workload_identity_pools.list_attestation_rules` Projects locations workload identity pools: list attestation rules read - `gcp_iam.projects_locations_workload_identity_pools.patch` Projects locations workload identity pools: patch write - `gcp_iam.projects_locations_workload_identity_pools.remove_attestation_rule` Projects locations workload identity pools: remove attestation rule write - `gcp_iam.projects_locations_workload_identity_pools.set_attestation_rules` Projects locations workload identity pools: set attestation rules write - `gcp_iam.projects_locations_workload_identity_pools.set_iam_policy` Projects locations workload identity pools: set iam policy destructive - `gcp_iam.projects_locations_workload_identity_pools.test_iam_permissions` Projects locations workload identity pools: test iam permissions read - `gcp_iam.projects_locations_workload_identity_pools.undelete` Projects locations workload identity pools: undelete write **Projects locations workload identity pools namespaces managed identities 10** - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.add_attestation_rule` Projects locations workload identity pools namespaces managed identities: add attestation rule write - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.create` Projects locations workload identity pools namespaces managed identities: create write - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.delete` Projects locations workload identity pools namespaces managed identities: delete destructive - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.get` Projects locations workload identity pools namespaces managed identities: get read - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.list` Projects locations workload identity pools namespaces managed identities: list read - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.list_attestation_rules` Projects locations workload identity pools namespaces managed identities: list attestation rules read - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.patch` Projects locations workload identity pools namespaces managed identities: patch write - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.remove_attestation_rule` Projects locations workload identity pools namespaces managed identities: remove attestation rule write - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.set_attestation_rules` Projects locations workload identity pools namespaces managed identities: set attestation rules write - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities.undelete` Projects locations workload identity pools namespaces managed identities: undelete write **Locations workforce pools 9** - `gcp_iam.locations_workforce_pools.create` Locations workforce pools: create write - `gcp_iam.locations_workforce_pools.delete` Locations workforce pools: delete destructive - `gcp_iam.locations_workforce_pools.get` Locations workforce pools: get read - `gcp_iam.locations_workforce_pools.get_iam_policy` Locations workforce pools: get iam policy read - `gcp_iam.locations_workforce_pools.list` Locations workforce pools: list read - `gcp_iam.locations_workforce_pools.patch` Locations workforce pools: patch write - `gcp_iam.locations_workforce_pools.set_iam_policy` Locations workforce pools: set iam policy destructive - `gcp_iam.locations_workforce_pools.test_iam_permissions` Locations workforce pools: test iam permissions read - `gcp_iam.locations_workforce_pools.undelete` Locations workforce pools: undelete write **Locations workforce pools providers scim tenants 9** - `gcp_iam.locations_workforce_pools_providers_scim_tenants.create` Locations workforce pools providers scim tenants: create write - `gcp_iam.locations_workforce_pools_providers_scim_tenants.delete` Locations workforce pools providers scim tenants: delete destructive - `gcp_iam.locations_workforce_pools_providers_scim_tenants.get` Locations workforce pools providers scim tenants: get read - `gcp_iam.locations_workforce_pools_providers_scim_tenants.get_iam_policy` Locations workforce pools providers scim tenants: get iam policy read - `gcp_iam.locations_workforce_pools_providers_scim_tenants.list` Locations workforce pools providers scim tenants: list read - `gcp_iam.locations_workforce_pools_providers_scim_tenants.patch` Locations workforce pools providers scim tenants: patch write - `gcp_iam.locations_workforce_pools_providers_scim_tenants.set_iam_policy` Locations workforce pools providers scim tenants: set iam policy destructive - `gcp_iam.locations_workforce_pools_providers_scim_tenants.test_iam_permissions` Locations workforce pools providers scim tenants: test iam permissions read - `gcp_iam.locations_workforce_pools_providers_scim_tenants.undelete` Locations workforce pools providers scim tenants: undelete write **Projects service accounts keys 7** - `gcp_iam.projects_service_accounts_keys.create` Projects service accounts keys: create write - `gcp_iam.projects_service_accounts_keys.delete` Projects service accounts keys: delete destructive - `gcp_iam.projects_service_accounts_keys.disable` Projects service accounts keys: disable destructive - `gcp_iam.projects_service_accounts_keys.enable` Projects service accounts keys: enable write - `gcp_iam.projects_service_accounts_keys.get` Projects service accounts keys: get read - `gcp_iam.projects_service_accounts_keys.list` Projects service accounts keys: list read - `gcp_iam.projects_service_accounts_keys.upload` Projects service accounts keys: upload write **Locations workforce pools providers 6** - `gcp_iam.locations_workforce_pools_providers.create` Locations workforce pools providers: create write - `gcp_iam.locations_workforce_pools_providers.delete` Locations workforce pools providers: delete destructive - `gcp_iam.locations_workforce_pools_providers.get` Locations workforce pools providers: get read - `gcp_iam.locations_workforce_pools_providers.list` Locations workforce pools providers: list read - `gcp_iam.locations_workforce_pools_providers.patch` Locations workforce pools providers: patch write - `gcp_iam.locations_workforce_pools_providers.undelete` Locations workforce pools providers: undelete write **Organizations roles 6** - `gcp_iam.organizations_roles.create` Organizations roles: create write - `gcp_iam.organizations_roles.delete` Organizations roles: delete destructive - `gcp_iam.organizations_roles.get` Organizations roles: get read - `gcp_iam.organizations_roles.list` Organizations roles: list read - `gcp_iam.organizations_roles.patch` Organizations roles: patch write - `gcp_iam.organizations_roles.undelete` Organizations roles: undelete write **Projects locations oauth clients 6** - `gcp_iam.projects_locations_oauth_clients.create` Projects locations oauth clients: create write - `gcp_iam.projects_locations_oauth_clients.delete` Projects locations oauth clients: delete destructive - `gcp_iam.projects_locations_oauth_clients.get` Projects locations oauth clients: get read - `gcp_iam.projects_locations_oauth_clients.list` Projects locations oauth clients: list read - `gcp_iam.projects_locations_oauth_clients.patch` Projects locations oauth clients: patch write - `gcp_iam.projects_locations_oauth_clients.undelete` Projects locations oauth clients: undelete write **Projects locations workload identity pools namespaces 6** - `gcp_iam.projects_locations_workload_identity_pools_namespaces.create` Projects locations workload identity pools namespaces: create write - `gcp_iam.projects_locations_workload_identity_pools_namespaces.delete` Projects locations workload identity pools namespaces: delete destructive - `gcp_iam.projects_locations_workload_identity_pools_namespaces.get` Projects locations workload identity pools namespaces: get read - `gcp_iam.projects_locations_workload_identity_pools_namespaces.list` Projects locations workload identity pools namespaces: list read - `gcp_iam.projects_locations_workload_identity_pools_namespaces.patch` Projects locations workload identity pools namespaces: patch write - `gcp_iam.projects_locations_workload_identity_pools_namespaces.undelete` Projects locations workload identity pools namespaces: undelete write **Projects locations workload identity pools providers 6** - `gcp_iam.projects_locations_workload_identity_pools_providers.create` Projects locations workload identity pools providers: create write - `gcp_iam.projects_locations_workload_identity_pools_providers.delete` Projects locations workload identity pools providers: delete destructive - `gcp_iam.projects_locations_workload_identity_pools_providers.get` Projects locations workload identity pools providers: get read - `gcp_iam.projects_locations_workload_identity_pools_providers.list` Projects locations workload identity pools providers: list read - `gcp_iam.projects_locations_workload_identity_pools_providers.patch` Projects locations workload identity pools providers: patch write - `gcp_iam.projects_locations_workload_identity_pools_providers.undelete` Projects locations workload identity pools providers: undelete write **Projects roles 6** - `gcp_iam.projects_roles.create` Projects roles: create write - `gcp_iam.projects_roles.delete` Projects roles: delete destructive - `gcp_iam.projects_roles.get` Projects roles: get read - `gcp_iam.projects_roles.list` Projects roles: list read - `gcp_iam.projects_roles.patch` Projects roles: patch write - `gcp_iam.projects_roles.undelete` Projects roles: undelete write **V3 folders locations access policies 6** - `gcp_iam.v3_folders_locations_access_policies.create` Folders locations access policies: create write - `gcp_iam.v3_folders_locations_access_policies.delete` Folders locations access policies: delete destructive - `gcp_iam.v3_folders_locations_access_policies.get` Folders locations access policies: get read - `gcp_iam.v3_folders_locations_access_policies.list` Folders locations access policies: list read - `gcp_iam.v3_folders_locations_access_policies.patch` Folders locations access policies: patch write - `gcp_iam.v3_folders_locations_access_policies.search_policy_bindings` Folders locations access policies: search policy bindings read **V3 folders locations policy bindings 6** - `gcp_iam.v3_folders_locations_policy_bindings.create` Folders locations policy bindings: create write - `gcp_iam.v3_folders_locations_policy_bindings.delete` Folders locations policy bindings: delete destructive - `gcp_iam.v3_folders_locations_policy_bindings.get` Folders locations policy bindings: get read - `gcp_iam.v3_folders_locations_policy_bindings.list` Folders locations policy bindings: list read - `gcp_iam.v3_folders_locations_policy_bindings.patch` Folders locations policy bindings: patch write - `gcp_iam.v3_folders_locations_policy_bindings.search_target_policy_bindings` Folders locations policy bindings: search target policy bindings read **V3 organizations locations access policies 6** - `gcp_iam.v3_organizations_locations_access_policies.create` Organizations locations access policies: create write - `gcp_iam.v3_organizations_locations_access_policies.delete` Organizations locations access policies: delete destructive - `gcp_iam.v3_organizations_locations_access_policies.get` Organizations locations access policies: get read - `gcp_iam.v3_organizations_locations_access_policies.list` Organizations locations access policies: list read - `gcp_iam.v3_organizations_locations_access_policies.patch` Organizations locations access policies: patch write - `gcp_iam.v3_organizations_locations_access_policies.search_policy_bindings` Organizations locations access policies: search policy bindings read **V3 organizations locations policy bindings 6** - `gcp_iam.v3_organizations_locations_policy_bindings.create` Organizations locations policy bindings: create write - `gcp_iam.v3_organizations_locations_policy_bindings.delete` Organizations locations policy bindings: delete destructive - `gcp_iam.v3_organizations_locations_policy_bindings.get` Organizations locations policy bindings: get read - `gcp_iam.v3_organizations_locations_policy_bindings.list` Organizations locations policy bindings: list read - `gcp_iam.v3_organizations_locations_policy_bindings.patch` Organizations locations policy bindings: patch write - `gcp_iam.v3_organizations_locations_policy_bindings.search_target_policy_bindings` Organizations locations policy bindings: search target policy bindings read **V3 organizations locations principal access boundary policies 6** - `gcp_iam.v3_organizations_locations_principal_access_boundary_policies.create` Organizations locations principal access boundary policies: create write - `gcp_iam.v3_organizations_locations_principal_access_boundary_policies.delete` Organizations locations principal access boundary policies: delete destructive - `gcp_iam.v3_organizations_locations_principal_access_boundary_policies.get` Organizations locations principal access boundary policies: get read - `gcp_iam.v3_organizations_locations_principal_access_boundary_policies.list` Organizations locations principal access boundary policies: list read - `gcp_iam.v3_organizations_locations_principal_access_boundary_policies.patch` Organizations locations principal access boundary policies: patch write - `gcp_iam.v3_organizations_locations_principal_access_boundary_policies.search_policy_bindings` Organizations locations principal access boundary policies: search policy bindings read **V3 projects locations access policies 6** - `gcp_iam.v3_projects_locations_access_policies.create` Projects locations access policies: create write - `gcp_iam.v3_projects_locations_access_policies.delete` Projects locations access policies: delete destructive - `gcp_iam.v3_projects_locations_access_policies.get` Projects locations access policies: get read - `gcp_iam.v3_projects_locations_access_policies.list` Projects locations access policies: list read - `gcp_iam.v3_projects_locations_access_policies.patch` Projects locations access policies: patch write - `gcp_iam.v3_projects_locations_access_policies.search_policy_bindings` Projects locations access policies: search policy bindings read **V3 projects locations policy bindings 6** - `gcp_iam.v3_projects_locations_policy_bindings.create` Projects locations policy bindings: create write - `gcp_iam.v3_projects_locations_policy_bindings.delete` Projects locations policy bindings: delete destructive - `gcp_iam.v3_projects_locations_policy_bindings.get` Projects locations policy bindings: get read - `gcp_iam.v3_projects_locations_policy_bindings.list` Projects locations policy bindings: list read - `gcp_iam.v3_projects_locations_policy_bindings.patch` Projects locations policy bindings: patch write - `gcp_iam.v3_projects_locations_policy_bindings.search_target_policy_bindings` Projects locations policy bindings: search target policy bindings read **Locations workforce pools providers keys 5** - `gcp_iam.locations_workforce_pools_providers_keys.create` Locations workforce pools providers keys: create write - `gcp_iam.locations_workforce_pools_providers_keys.delete` Locations workforce pools providers keys: delete destructive - `gcp_iam.locations_workforce_pools_providers_keys.get` Locations workforce pools providers keys: get read - `gcp_iam.locations_workforce_pools_providers_keys.list` Locations workforce pools providers keys: list read - `gcp_iam.locations_workforce_pools_providers_keys.undelete` Locations workforce pools providers keys: undelete write **Locations workforce pools providers scim tenants tokens 5** - `gcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.create` Locations workforce pools providers scim tenants tokens: create write - `gcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.delete` Locations workforce pools providers scim tenants tokens: delete destructive - `gcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.get` Locations workforce pools providers scim tenants tokens: get read - `gcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.list` Locations workforce pools providers scim tenants tokens: list read - `gcp_iam.locations_workforce_pools_providers_scim_tenants_tokens.patch` Locations workforce pools providers scim tenants tokens: patch write **Projects locations oauth clients credentials 5** - `gcp_iam.projects_locations_oauth_clients_credentials.create` Projects locations oauth clients credentials: create write - `gcp_iam.projects_locations_oauth_clients_credentials.delete` Projects locations oauth clients credentials: delete destructive - `gcp_iam.projects_locations_oauth_clients_credentials.get` Projects locations oauth clients credentials: get read - `gcp_iam.projects_locations_oauth_clients_credentials.list` Projects locations oauth clients credentials: list read - `gcp_iam.projects_locations_oauth_clients_credentials.patch` Projects locations oauth clients credentials: patch write **Projects locations workload identity pools providers keys 5** - `gcp_iam.projects_locations_workload_identity_pools_providers_keys.create` Projects locations workload identity pools providers keys: create write - `gcp_iam.projects_locations_workload_identity_pools_providers_keys.delete` Projects locations workload identity pools providers keys: delete destructive - `gcp_iam.projects_locations_workload_identity_pools_providers_keys.get` Projects locations workload identity pools providers keys: get read - `gcp_iam.projects_locations_workload_identity_pools_providers_keys.list` Projects locations workload identity pools providers keys: list read - `gcp_iam.projects_locations_workload_identity_pools_providers_keys.undelete` Projects locations workload identity pools providers keys: undelete write **V2 policies 5** - `gcp_iam.v2_policies.create_policy` Policies: create policy write - `gcp_iam.v2_policies.delete` Policies: delete destructive - `gcp_iam.v2_policies.get` Policies: get read - `gcp_iam.v2_policies.list_policies` Policies: list policies read - `gcp_iam.v2_policies.update` Policies: update write **Locations workforce pools subjects 3** - `gcp_iam.locations_workforce_pools_subjects.delete` Locations workforce pools subjects: delete destructive - `gcp_iam.locations_workforce_pools_subjects.revoke_sessions` Locations workforce pools subjects: revoke sessions destructive - `gcp_iam.locations_workforce_pools_subjects.undelete` Locations workforce pools subjects: undelete write **Roles 3** - `gcp_iam.roles.get` Roles: get read - `gcp_iam.roles.list` Roles: list read - `gcp_iam.roles.query_grantable_roles` Roles: query grantable roles read **IAM policies 2** - `gcp_iam.iam_policies.lint_policy` Iam policies: lint policy read - `gcp_iam.iam_policies.query_auditable_services` Iam policies: query auditable services read **Locations workforce pools operations 1** - `gcp_iam.locations_workforce_pools_operations.get` Locations workforce pools operations: get read **Locations workforce pools providers keys operations 1** - `gcp_iam.locations_workforce_pools_providers_keys_operations.get` Locations workforce pools providers keys operations: get read **Locations workforce pools providers operations 1** - `gcp_iam.locations_workforce_pools_providers_operations.get` Locations workforce pools providers operations: get read **Locations workforce pools subjects operations 1** - `gcp_iam.locations_workforce_pools_subjects_operations.get` Locations workforce pools subjects operations: get read **Permissions 1** - `gcp_iam.permissions.query_testable_permissions` Permissions: query testable permissions read **Projects locations workload identity pools namespaces managed identities operations 1** - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities_operations.get` Projects locations workload identity pools namespaces managed identities operations: get read **Projects locations workload identity pools namespaces managed identities workload sources operations 1** - `gcp_iam.projects_locations_workload_identity_pools_namespaces_managed_identities_workload_sources_operations.get` Projects locations workload identity pools namespaces managed identities workload sources operations: get read **Projects locations workload identity pools namespaces operations 1** - `gcp_iam.projects_locations_workload_identity_pools_namespaces_operations.get` Projects locations workload identity pools namespaces operations: get read **Projects locations workload identity pools operations 1** - `gcp_iam.projects_locations_workload_identity_pools_operations.get` Projects locations workload identity pools operations: get read **Projects locations workload identity pools providers keys operations 1** - `gcp_iam.projects_locations_workload_identity_pools_providers_keys_operations.get` Projects locations workload identity pools providers keys operations: get read **Projects locations workload identity pools providers operations 1** - `gcp_iam.projects_locations_workload_identity_pools_providers_operations.get` Projects locations workload identity pools providers operations: get read **V2 policies operations 1** - `gcp_iam.v2_policies_operations.get` Policies operations: get read **V3 folders locations operations 1** - `gcp_iam.v3_folders_locations_operations.get` Folders locations operations: get read **V3 organizations locations operations 1** - `gcp_iam.v3_organizations_locations_operations.get` Organizations locations operations: get read **V3 projects locations operations 1** - `gcp_iam.v3_projects_locations_operations.get` Projects locations operations: get read Questions ## The Google Cloud IAM MCP server, answered. **Is there a Google Cloud IAM MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 188 Google Cloud IAM actions across projects service accounts, projects locations workload identity pools, projects locations workload identity pools namespaces managed identities and locations workforce pools, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Google Cloud IAM. **What do I need to connect Google Cloud IAM?** Your own Google Cloud IAM OAuth app, registered with Google Cloud IAM (its client id and client secret), and the access and refresh tokens from one admin sign-in. actionlake has no Google Cloud IAM app of its own, so this is not a one-step consent. actionlake renews the access token as it expires. The free call account { op: "connections.requirements", service: "gcp_iam" } lists exactly what to paste. **Can an AI agent delete or change things in Google Cloud IAM?** Only if its key allows it, and only with an explicit confirmation. 32 Google Cloud IAM actions are destructive, including projects roles: delete, organizations roles: delete and projects service accounts: delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Google Cloud IAM API limit?** actionlake paces every call to the limits in the Google Cloud IAM service file: 600 calls a minute per connection. Repeated reads are answered from cache (67 Google Cloud IAM actions can be), which never reaches Google Cloud IAM. **What does a Google Cloud IAM action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (34 Google Cloud IAM actions page). Cache hits, searches, dry runs and calls Google Cloud IAM refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Google Cloud IAM API does it cover?** The Google Cloud IAM (service accounts, keys, roles, workload and workforce identity, deny and access policies) API iam v1 + v2 + v3 (Discovery revision 20261016) at iam.googleapis.com. It is built from Google Cloud IAM's documentation as read on 23 October 2026. 188 actions in 42 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Google Cloud IAM data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Google Cloud IAM credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Google Cloud IAM Shares the most action names with - [Doppler 10](https://actionlake.com/connectors/doppler) - [Infisical 10](https://actionlake.com/connectors/infisical) - [Clerk 10](https://actionlake.com/connectors/clerk) - [SailPoint Identity Security Cloud 5](https://actionlake.com/connectors/sailpoint-identity-security-cloud) - [Descope 4](https://actionlake.com/connectors/descope) - [Stytch 4](https://actionlake.com/connectors/stytch) Joins with, on shared entities - [Sumo Logic 2](https://actionlake.com/connectors/sumo-logic) - [Unleash 2](https://actionlake.com/connectors/unleash) - [Devin (Cognition) 2](https://actionlake.com/connectors/devin-cognition) - [Starburst Galaxy 2](https://actionlake.com/connectors/starburst-galaxy) - [HaloPSA 1](https://actionlake.com/connectors/halopsa) - [Fortinet FortiGate 1](https://actionlake.com/connectors/fortinet-fortigate) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Google Cloud IAM; the name is the vendor's own. Counts are from the Google Cloud IAM service file, version 1.0.0. ## Give your agent Google Cloud IAM today. [Connect Google Cloud IAM free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/google-cloud-iam More: https://actionlake.com/llms.txt