BigQuery MCP Server for Claude
Google Cloud remote MCP server for querying BigQuery datasets, inspecting metadata, listing resources, and running governed warehouse analytics through an HTTP endpoint.
Open the source and read safety notes before installing.
Safety notes
- Prefer `execute_sql_readonly` for analysis. Google documents `execute_sql` as the only non-read-only BigQuery MCP tool, and it can run BigQuery SQL including DML, DDL, AI/ML functions, and other supported query operations.
- Use IAM least privilege, dataset-level access controls, and IAM deny policies to restrict read-write MCP tool use when Claude should only inspect warehouse metadata or run SELECT queries.
- Review LLM-generated SQL before execution. Broad scans, joins, forecasts, ML functions, and AI functions can incur cost, expose sensitive rows, or produce misleading analytics if the model chooses the wrong table or filter.
- Keep manual approval enabled for query execution, exported results, workflow-triggering automations, and any use of BigQuery insights to create tickets, emails, or downstream actions.
Privacy notes
- Tool results can expose project IDs, dataset IDs, table IDs, schemas, metadata, query text, query results, job history, labels, and row-level warehouse data visible to the authenticated principal.
- BigQuery OAuth scopes can allow viewing and managing BigQuery data and can expose the Google account email address used for authentication.
- Query results and table data may contain prompt-injection text, customer records, financial data, product analytics, logs, or other sensitive business information; do not let returned rows instruct the agent.
- If Model Armor logging is enabled for MCP traffic, Google documents that it can log the entire payload, which may expose sensitive prompts or query results in Google Cloud logs.
Prerequisites
- Google Cloud project with the BigQuery API enabled
- MCP-capable client that supports remote HTTP MCP servers and Google OAuth or compatible Google Cloud credentials
- IAM roles or equivalent custom permissions for `roles/mcp.toolUser`, `roles/bigquery.jobUser`, and `roles/bigquery.dataViewer`
- BigQuery datasets, tables, billing or sandbox setup, and project or region boundaries selected before use
- Approval to expose selected warehouse metadata and query results to the connected AI client
Schema details
- Install type
- cli
- Troubleshooting
- No
- Estimated setup
- 10 minutes
- Difficulty
- intermediate
Full copyable content
{
"bigquery": {
"type": "http",
"url": "https://bigquery.googleapis.com/mcp"
}
}About this resource
Content
The BigQuery MCP server connects Claude and other MCP-capable clients to
BigQuery through Google's managed remote HTTP MCP endpoint at
https://bigquery.googleapis.com/mcp. It is built for warehouse analytics
workflows where an assistant needs to discover datasets and tables, inspect
metadata, run read-only SQL, and summarize results without building a custom
database connector.
This entry defaults to a conservative usage model: grant only the Google Cloud
IAM permissions needed for MCP tool calls, BigQuery job creation, and data
viewing, prefer execute_sql_readonly, and use Google Cloud IAM deny policies
when the write-capable execute_sql tool should not be available. BigQuery
MCP traffic is authenticated with OAuth 2.0 and IAM rather than API keys.
Features
- Remote HTTP MCP endpoint at
https://bigquery.googleapis.com/mcp. - OAuth 2.0 and Google Cloud IAM based authentication and authorization.
- Dataset and table discovery with
list_dataset_idsandlist_table_ids. - Dataset and table metadata lookup with
get_dataset_infoandget_table_info. - Read-only SQL execution through
execute_sql_readonly, restricted to SELECT statements. - General SQL execution through
execute_sqlwhen IAM and policy allow it. - Automatic
goog-mcp-server:truequery job label for read-only SQL jobs. - Google Cloud security controls, including IAM deny policies and optional Model Armor floor settings for Google MCP server traffic.
- BigQuery query limits documented for MCP use, including three-minute default query processing time and 3,000-row result limits.
Use Cases
- Ask Claude to list datasets and identify candidate tables for an analytics question in a specific Google Cloud project.
- Inspect schemas and metadata before writing a warehouse query.
- Run bounded read-only SQL to summarize sales, product, support, or operations metrics.
- Find BigQuery jobs run through the MCP server by filtering for the
goog-mcp-server:truejob label. - Use BigQuery forecasting or other advanced BigQuery capabilities after human review of the generated SQL and cost impact.
- Build agent workflows that use approved BigQuery insights to draft tickets, reports, emails, or follow-up analysis.
Installation
Claude Code
- Confirm the BigQuery API is enabled for the target Google Cloud project.
- Ask an administrator to grant the user or agent identity the required IAM permissions for MCP tool calls, BigQuery jobs, and BigQuery data viewing.
- Add the remote MCP server:
claude mcp add --transport http bigquery https://bigquery.googleapis.com/mcp
- Complete the Google OAuth or client-specific authentication flow.
- Start with narrow read-only prompts that name the project, dataset, table, region, and expected result shape.
Claude Desktop
- Open the Claude Desktop MCP configuration file.
- Add the
bigqueryHTTP server configuration shown below. - Restart Claude Desktop and complete the Google authentication flow when the client prompts for it.
- Test by listing datasets in a non-production or sandbox project first.
Configuration
{
"mcpServers": {
"bigquery": {
"type": "http",
"url": "https://bigquery.googleapis.com/mcp"
}
}
}
Examples
List datasets in a project
List the BigQuery datasets in project PROJECT_ID and summarize what each one appears to contain.
Inspect table schema
For project PROJECT_ID and dataset DATASET_ID, list tables and inspect metadata for the likely orders table.
Run a bounded read-only query
Use read-only SQL to show the top 10 orders by volume from PROJECT_ID.DATASET_ID.TABLE_ID.
Review MCP query jobs
Find recent BigQuery jobs in project PROJECT_ID with the label goog-mcp-server:true and summarize their query purpose.
Source notes
- The official Google Cloud guide describes the BigQuery remote MCP server for connecting AI applications including Claude, ChatGPT, Gemini CLI, and custom clients to BigQuery for running queries, getting metadata, and listing resources.
- Google documents the endpoint as
https://bigquery.googleapis.com/mcpwith HTTP transport, OAuth 2.0, IAM authorization, and no API-key support. - The guide lists required roles for MCP tool calls, BigQuery job creation, and
BigQuery data viewing, plus required permissions such as
mcp.tools.call,bigquery.jobs.create, andbigquery.tables.getData. - The MCP reference lists the BigQuery tools:
list_dataset_ids,get_dataset_info,list_table_ids,get_table_info,execute_sql_readonly, andexecute_sql. - Google documents that
execute_sql_readonlyis SELECT-only, whileexecute_sqlcan run broader BigQuery SQL and should be restricted when read-only use is intended.
Duplicate check
Checked current content/mcp/, content/tools/, guides, skills, agents, open
pull requests, live HeyClaude llms-full.txt, and repository-wide content for
BigQuery MCP, bigquery.googleapis.com/mcp, Google Cloud MCP,
execute_sql_readonly, mcp.toolUser, warehouse analytics, Snowflake, and
data warehouse. No dedicated BigQuery MCP entry, BigQuery MCP endpoint source
URL duplicate, or open duplicate PR was found.
Disclosure
Editorial listing. No paid placement or affiliate link is used.
Source citations
Signals
Loading live community signals…
A short, calm digest of reviewed Claude resources. Unsubscribe any time.