
Google Cloud Bigtable
Generally AvailableManage the Cloud Bigtable control plane: create and list instances and tables — governed by Cloud IAM.
- Database
- NoSQL
- Wide-Column
- Authentication
- OAuth 2.0
- Hosting
- Vendor-hosted endpoint
- Required scopes
- 1
- Data actions
- Read and write
How it works
Every agent request passes through Ferentin policy before it reaches Google Cloud Bigtable.
Ferentin's Google Bigtable MCP server connects agents through OAuth2 + Cloud IAM to the Bigtable Admin control plane, with tools for instance and table lifecycle management. It does not expose row-level data operations; time-series metrics come from the separate Database Insights MCP server. Access is scoped by the signing-in identity's IAM grants (roles/bigtable.admin + roles/mcp.toolUser).
- AI agentAsks for something
- Ferentin policies
- OAuth 2.0 consent
- Cloud iam authorization
- No API keys
- Audit logging
- Google Cloud Bigtable MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What agents can do
14 tools · you choose which ones agents may callSearch and browse what exists, without opening the content itself.
- list_instances
- list_tables
- list_logical_views
- list_hot_tablets
Permissions requested
The OAuth 2.0 scopes Google Cloud Bigtable asks you to approve when you connect.
| Scope | Access |
|---|---|
| https://www.googleapis.com/auth/bigtable.admin | Admin |
Before you connect
- Google does not support Dynamic Client Registration (DCR) — each tenant must create its own OAuth client in Google Cloud Console.
- Authentication is OAuth 2.0 + Google Cloud IAM. API keys are not accepted; access is enforced by the signing-in identity's IAM roles.
- Use access_type=offline to receive a refresh token for long-lived access.
- The correct host is bigtableadmin.googleapis.com/mcp (control plane); the scope is bigtable.admin (or cloud-platform).
3 more technical notes
- Requires roles/mcp.toolUser and roles/bigtable.admin.
- This server manages instances/tables only — it does not expose row-level data reads/writes.
- Time-series metrics are provided by the separate Database Insights MCP server.
About Google Cloud Bigtable
Cloud Bigtable is Google Cloud's low-latency, petabyte-scale wide-column NoSQL database for large analytical and operational workloads.
Frequently asked about Google Cloud Bigtable
- What can AI agents do with Google Cloud Bigtable through Ferentin?
- Ferentin exposes 14 Google Cloud Bigtable MCP tools to your AI agents, grouped as Discover (4 tools), Access (3 tools) and Manage (7 tools). Every call is checked against your Ferentin policies before it reaches Google Cloud Bigtable.
- How is Google Cloud Bigtable access secured?
- Requests through the Google Cloud Bigtable integration are covered by OAuth 2.0 consent, cloud iam authorization, no API keys and audit logging. These controls are applied by Ferentin, not by Google Cloud Bigtable, so they hold across every connected agent.
- What permissions does the Google Cloud Bigtable integration require?
- The Google Cloud Bigtable integration requests 1 OAuth 2.0 scope: https://www.googleapis.com/auth/bigtable.admin (admin access)
- How do I connect Google Cloud Bigtable to Ferentin?
- Open the Ferentin admin console, add Google Cloud Bigtable as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the Google Cloud Bigtable integration generally available?
- Yes. The Google Cloud Bigtable integration is generally available on Ferentin, including the free tier.
Related integrations
3
Google Cloud Firestore
Read, write, and query Firestore documents and manage databases/indexes — governed by Cloud IAM.

Google Cloud Spanner
Manage Cloud Spanner instances and databases and run multi-model (SQL + graph GQL) queries — governed by Cloud IAM.

Google BigQuery
Query and explore BigQuery data warehouses. Discover datasets/tables, inspect schema, and run read-only SQL — governed by Cloud IAM.