
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@google-cloud/observability-mcp
Advanced tools
MCP Server for GCP environment for interacting with various Observability APIs.
This server connects Model Context Protocol (MCP) clients (like the Gemini CLI) to Cloud Observability APIs to search for logs, view metrics, return traces and view error reports. It acts as a local bridge, translating natural language commands from your CLI into the appropriate API calls to help you understand, manage, and troubleshoot your Google Cloud environment.
To learn more about the underlying services, see the official documentation:
For prerequisites and setup instructions, please see the root README.
You need to authenticate twice: once for your user account and once for the application itself.
# Authenticate your user account to the gcloud CLI
gcloud auth login
# Set up Application Default Credentials for the server.
# This allows the MCP server to securely make Google Cloud API calls on your behalf.
gcloud auth application-default login
All API requests made by this server require a Google Cloud project for billing and API quota management. This is known as the "quota project". This project will likely already be set in the gcloud CLI. The project selected as the quota project will need to have the APIs you wish to use in Observability enabled or you will see errors when attempting to use their related tools (e.g. you need the Cloud Logging API enabled in the quota project to use the list_log_entries tool).
If you need to control which project is used for quotas, run the following command (https://cloud.google.com/sdk/gcloud/reference/auth/application-default/set-quota-project):
# Set the project to be used for API quotas and billing by ADC
gcloud auth application-default set-quota-project YOUR_QUOTA_PROJECT_ID
This ensures that all API usage from this server is attributed to the correct project.
Once the server is configured, you can ask your MCP client natural language questions about your Google Cloud environment. Here are a few examples:
Your MCP client will translate these questions into the appropriate tool calls to fetch the data from Google Cloud.
The server exposes the following tools:
| Service | Tool | Description |
|---|---|---|
| Logging | list_log_entries | Lists log entries from a project. |
list_log_names | Lists log names from a project. | |
list_buckets | Lists log buckets from a project. | |
list_views | Lists log views from a project. | |
list_sinks | Lists log sinks from a project. | |
list_log_scopes | Lists log scopes from a project. | |
| Monitoring | list_metric_descriptors | Lists metric descriptors for a project. |
list_time_series | Lists time series data for a given metric. | |
list_alert_policies | Lists the alert policies in a project. | |
| Trace | list_traces | Searches for traces in a project. |
get_trace | Gets a specific trace in a project. | |
| Error Reporting | list_group_stats | Lists the error groups for a project. |
This repository is currently in preview and may see breaking changes. This repository provides a solution, not an officially supported Google product. It is not covered under Google Cloud Terms of Service. It may break when the MCP specification, other SDKs, or when other solutions and products change. See also our Security Policy.
Please read our Contributing Guide to get started.
This project is licensed under the Apache 2.0 License - see the LICENSE file for details.
FAQs
MCP Server for GCP environment for interacting with various Observability APIs.
The npm package @google-cloud/observability-mcp receives a total of 5,479 weekly downloads. As such, @google-cloud/observability-mcp popularity was classified as popular.
We found that @google-cloud/observability-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.