Google Cloud Storage MCP Server: Setup for Claude, Cursor and Gemini CLI

• Lists the storage buckets in a Google Cloud project

  Returns every bucket in a project you name. A good first step when you do not remember where a file lives.

  Try: “List all the buckets in my project analytics-prod.”

  Network · list_buckets

• Lists the files inside a bucket

  Lists objects in a bucket, with options to narrow the list by folder-style prefix.

  Try: “Show me what is in the reports folder of the finance-archive bucket.”

  Network · list_objects

• Reads the contents of a file in a bucket

  Fetches the content of one stored object so the assistant can read it. Text comes back as text; other file types come back as a resource.

  Try: “Read config/settings.json from the app-assets bucket and summarize it.”

  Network · read_object_content

• Shows size, type, dates and labels for one file

  Returns the full metadata record for a single object, such as its size, content type and timestamps.

  Try: “When was backups/db-dump.sql last updated and how big is it?”

  Network · read_object_metadata

• Shows the settings of a bucket

  Returns the full metadata for a bucket, including its location, storage class and labels.

  Try: “What storage class and location does the media-uploads bucket use?”

  Network · get_bucket_metadata

• Tells you where a bucket is stored

  Returns the region or multi-region a bucket lives in.

  Try: “Which region is the logs-eu bucket in?”

  Network · get_bucket_location

• Shows who has access to a bucket

  Returns the access policy of a bucket, which lists the roles and who holds them.

  Try: “Who has access to the customer-exports bucket?”

  Network · view_iam_policy

• Checks which actions your account can do on a bucket

  Tests a list of permissions against a bucket and reports which ones the signed-in account has.

  Try: “Can I delete objects in the staging-assets bucket?”

  Network · check_iam_permissions

• Lists Storage Insights datasets set up in a project

  Returns the names of the Storage Insights dataset configurations in a project. These datasets let you run reports across all your objects.

  Try: “Which Storage Insights datasets exist in my project?”

  Network · list_insights_configs

• Checks Insights is on and shows its table layout

  Checks whether Storage Insights is enabled and returns the BigQuery table layout for a dataset, so a query can be written against it.

  Try: “Show me the columns of my Storage Insights dataset.”

  Network · get_metadata_table_schema

• Runs a report across all your objects with BigQuery

  Runs a BigQuery SQL query against a Storage Insights dataset and returns the rows. Use it for totals and filters over a whole inventory, such as counting files by type.

  Try: “How many objects larger than 1 GB do we have, grouped by bucket?”

  Network · execute_insights_query

• Creates a new bucket

  Creates a bucket with the settings you give it. This is on in safe mode too, and new buckets can add cost.

  Try: “Create a bucket called team-archive-2026 in europe-west1.”

  Write · create_bucket

• Saves new text as a file, never overwriting

  Writes content to a new object and fails if one with that name already exists. This is the version on by default.

  Try: “Save these meeting notes as notes/2026-11-02.txt in the team-docs bucket.”

  Write · write_object_safe

• Uploads a local file as a new object, never overwriting

  Uploads a file from your computer to a bucket and fails if the object already exists. This is the version on by default.

  Try: “Upload ./report.pdf to the finance-archive bucket as 2026/report.pdf.”

  Write · upload_object_safe

• Copies a file to a new place, never overwriting

  Copies an object to a new destination and fails if the destination already exists. This is the version on by default.

  Try: “Copy data/raw.csv to data/backup/raw.csv in the same bucket.”

  Write · copy_object_safe

• Saves a file and overwrites it if it exists (destructive mode)

  Writes an object and replaces any existing one with the same name. It replaces write_object_safe when you start the server with the destructive flag.

  Try: “Overwrite config/app.json in app-assets with this new content.”

  Delete · write_object

• Uploads a local file and overwrites the target (destructive mode)

  Uploads a file and replaces an existing object at the destination. It replaces upload_object_safe when you start the server with the destructive flag.

  Try: “Upload ./site.zip to releases/site.zip and replace the old one.”

  Delete · upload_object

• Copies a file and overwrites the destination (destructive mode)

  Copies an object and replaces whatever sits at the destination. It replaces copy_object_safe when you start the server with the destructive flag.

  Try: “Copy staging/build.zip over production/build.zip.”

  Delete · copy_object

• Moves a file by copying it and deleting the original (destructive mode)

  Copies an object to a new place and then deletes the original. Only available with the destructive flag.

  Try: “Move inbox/invoice-114.pdf to processed/invoice-114.pdf.”

  Delete · move_object

• Deletes a file from a bucket (destructive mode)

  Permanently removes an object from a bucket. Only available with the destructive flag.

  Try: “Delete tmp/old-export.csv from the data-exports bucket.”

  Delete · delete_object

• Deletes a bucket (destructive mode)

  Deletes a bucket. Only available with the destructive flag.

  Try: “Delete the empty bucket test-scratch-1.”

  Delete · delete_bucket

• Changes the labels on a bucket (destructive mode)

  Changes the labels attached to a bucket. Only available with the destructive flag.

  Try: “Set the label env=prod on the billing-exports bucket.”

  Write · update_bucket_labels

• Changes the custom metadata of a file (destructive mode)

  Changes the custom metadata of an existing object. Only available with the destructive flag.

  Try: “Add the metadata key owner=finance to reports/q3.pdf.”

  Write · update_object_metadata

• Saves a bucket file to your computer, overwriting (destructive mode)

  Downloads an object to a path on your computer and overwrites a file already there. Only available with the destructive flag.

  Try: “Download backups/db-dump.sql to ./db-dump.sql.”

  Write · download_object

Watch out for

• The destructive flag adds delete and overwrite

  Starting the server with the destructive flag registers tools that delete buckets and objects, overwrite files and move objects. Leave it off unless you trust the task and the account. github.com

• Safe mode still creates buckets and files

  Creating buckets and adding new objects is allowed by default and can add cost. Use a service account whose role only allows what you want. github.com

• Access equals your gcloud account

  The server has the same permissions as the signed-in account. Authorize gcloud as a service account with a limited role to limit it. github.com

• Reads can run BigQuery queries

  The insights query tool runs SQL in BigQuery against a Storage Insights dataset, which can use your BigQuery quota. github.com

Security advisories