Does Google Cloud (BigQuery) have an MCP server?

Access is governed by the connecting account's existing Google Cloud IAM permissions, so scope is whatever that account can already do in BigQuery, not a separate MCP-specific permission model. Confirm the IAM roles behind a given connection before assuming it is read-only.

SQL execution means this tool can be used to run arbitrary queries against billed compute, with the cost and data-exposure implications that implies; review query plans for expensive or overly broad pulls before trusting an agent to self-limit. This is a research note based on Google's published documentation, not an endorsement of any particular configuration. Start with read-only scopes where supported and keep client-side approval prompts on.