google-agents-cli-deploy Skill for Claude: Deploy Agents to Google Cloud

Teaches Claude to deploy agents to Google Cloud with agents-cli: Agent Runtime, Cloud Run or GKE, plus CI/CD, secrets and rollback.

Installs: 533.1K; on skills.sh
Stars: 6.3K; on GitHub
Files: 8; besides SKILL.md
Updated: Oct 2026; last repo commit

google-agents-cli-deploy covers shipping an agent to Google Cloud with agents-cli deploy. It compares the three targets, Agent Runtime, Cloud Run and GKE, in a decision table. It also covers CI/CD pipelines, service accounts, Secret Manager, IAP, sizing, rollback and troubleshooting.

The rule that matters is in the SKILL.md: never run agents-cli deploy without explicit human approval. Deploys create real cloud resources and can cost money. Some options, such as infra single-project --apply, run Terraform in your project.

Good for

Developers shipping an ADK agent to Google Cloud
Platform teams setting up CI/CD and service accounts
Anyone fixing a deploy that hit 403s or timeouts

Install google-agents-cli-deploy

Claude Code

Copy this prompt.

Install the google-agents-cli-deploy skill in Claude Code. Run this command:

uvx google-agents-cli setup

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Python 3.11+, uv, Node.js.

Pick one route. setup installs the agents-cli program and the skills into your coding agent. The README says that with the skills-only route your coding agent handles the rest. The seven skills in the suite point to each other, so take the whole set.

From the project README. Source.

What's in the skill

When it loads

This skill should be used when the user wants to "deploy an agent", "deploy my ADK agent", "set up CI/CD", "configure secrets", "troubleshoot a deployment", or needs guidance on Agent Runtime, Cloud Run, or GKE deployment targets, or binding an agent to an Agent Gateway. Covers deployment workflows, service accounts, rollback, and production infrastructure. Applies to any framework agents-cli deploys (ADK, LangChain, ...). Part of the agents-cli skills suite. Do NOT use for agent API code patterns (ADK: use google-agents-cli-adk-code), evaluation (use google-agents-cli-eval), or project scaffolding (use google-agents-cli-scaffold).

Sections in SKILL.md

Reference Files
Deployment Target Decision Matrix
Deploying to Dev
Deploy Workflow
Single-Project Infrastructure Setup (Optional — Advanced)
Deploy Flag Reference
Sizing a deployment
Production Deployment — CI/CD Pipeline
Cloud Run Specifics
Agent Runtime specifics
GKE Specifics
Service Account Architecture
Required Permissions for CI/CD Setup
Required APIs
Secret Manager (for API Credentials)
Cloud SQL Permissions (Manual Deployment)

Key facts

Author: Google
License: Apache-2.0 (stated in SKILL.md)
GitHub stars: 6,276 for the whole google/agents-cli repo (Nov 2, 2026)
Last commit: Oct 27, 2026
What installs: SKILL.md plus 8 bundled files (guides and examples); no scripts in the file list
Needs: agents-cli; a Google Cloud project and sign-in; the other skills in the suite
Part of: The google-agents-cli plugin in google/agents-cli
skills.sh audits: Gen Agent Trust Hub pass, Socket pass, Snyk pass
Works in: Antigravity CLI, Claude Code, Codex and other coding agents (README)

What it includes

Compares Agent Runtime, Cloud Run and GKE
Read · Decision matrix
Deploys to the chosen target, only with human approval
Flags set CPU, memory, concurrency, instances, secrets and IAP.
Runs code · agents-cli deploy
Runs Terraform for service accounts and infrastructure
Optional, and advanced.
Runs code · infra single-project --apply
Production deploys through a pipeline
Reference file for pipeline setup.
Write · CI/CD pipeline
Passes secrets to the deployed agent
Used with --secrets.
Write · Secrets with Secret Manager
Reverts Cloud Run revisions; Agent Runtime redeploys
Agent Runtime has no revision-based rollback.
Runs code · Rollback and recovery
Binds to a gateway; customer-managed encryption keys
Write · Agent Gateway and CMEK
Fixes 403s, timeouts and test calls to the deployed agent
Read · Troubleshooting

From the official docs

Permissions

High risk

Claude can deploy billable services to your Google Cloud project and run Terraform that changes IAM roles. Keep the human-approval gate and read each plan first.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It deploys real, billable cloud services
agents-cli deploy creates resources in your Google Cloud project. The skill says never to deploy without explicit human approval, so keep that gate.
Terraform can change IAM roles
infra single-project --apply creates service accounts and bindings. Read the plan before you approve it.
Secrets pass through your session
Use Secret Manager as the skill describes, and do not paste secret values in chat.

Technical details

Scopes	Deploys containers to your Google Cloud project Can run Terraform that creates service accounts and IAM bindings Stores and passes secrets through Secret Manager

Questions

What does google-agents-cli-deploy do?

It teaches Claude to deploy an agent to Google Cloud with agents-cli deploy. It covers Agent Runtime, Cloud Run and GKE, CI/CD, secrets, service accounts and rollback.

How do I install it?

Use the install box at the top of this page. The setup command installs the agents-cli program and all seven skills in the suite, which is what you want. The README says that with the skills-only route your coding agent handles the rest. You need Python 3.11+, uv and Node.js first.

Will it deploy without asking me?

It is told not to. The SKILL.md says never to run agents-cli deploy without explicit human approval. That is an instruction to Claude, so keep approving commands one by one.

Which target should I pick?

Agent Runtime is the managed option with the least setup, Cloud Run gives you more control, and GKE gives full Kubernetes control. The SKILL.md has a full comparison table.

Does it need an API key?

The SKILL.md names no API key. It needs the agents-cli program and a Google Cloud sign-in, which agents-cli login handles; the README says login also supports AI Studio.

Is it safe?

It deploys cloud services and can run Terraform that changes IAM, so treat it as high risk and keep the approval gate. skills.sh lists Gen Agent Trust Hub, Socket and Snyk as pass.

Does it work in the Claude app, Codex or Cursor?

The README names Antigravity CLI, Claude Code and Codex, and says any other coding agent works too. It does not name the Claude desktop or web app or Cursor.

Information

updated Nov 2, 2026

Repository: google/agents-cli
Folder: skills/google-agents-cli-deploy

google/agents-cli skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 3

google/agents-cli README · github.com
google-agents-cli-deploy SKILL.md · github.com
google-agents-cli-deploy on skills.sh · skills.sh