
Google Cloud Firestore
GARead, write, and query Firestore documents and manage databases/indexes — governed by Cloud IAM.
How it works
Every agent request passes through Ferentin policy before it reaches Google Cloud Firestore.- AI agentAsks for something
- Ferentin policies
- OAuth 2.0 consent
- Cloud iam authorization
- No API keys
- Audit logging
- Google Cloud Firestore MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What you can do with Google Cloud Firestore
Discover
Search and browse what exists, without opening the content itself.
7 tools
Access
Read content and metadata, subject to masking policy.
5 tools
Manage
Create, update, organise and remove items.
13 tools
Technical capabilities25 tools
Discover
- list_documents
- list_collections
- query_collection
- list_databases
- list_indexes
- list_backups
- list_backup_schedules
Access
- get_document
- get_database
- get_index
- get_backup
- get_backup_schedule
Manage
- add_document
- update_document
- delete_document
- run_aggregation_query
- create_database
- update_database
- delete_database
- create_index
- delete_index
- delete_backup
- create_backup_schedule
- update_backup_schedule
- delete_backup_schedule
Overview
Firestore is Google Cloud's serverless, horizontally-scalable NoSQL document database for mobile, web, and server development.
Ferentin integration
Ferentin's Google Firestore MCP server connects agents through OAuth2 + Cloud IAM, with tools for document CRUD, collection queries, database lifecycle, and composite-index management. Access is scoped by the signing-in identity's IAM grants (roles/datastore.user + roles/mcp.toolUser).
Frequently asked about Google Cloud Firestore
- What can AI agents do with Google Cloud Firestore through Ferentin?
- Ferentin exposes 25 Google Cloud Firestore MCP tools to your AI agents, grouped as Discover (7 tools), Access (5 tools) and Manage (13 tools). Every call is checked against your Ferentin policies before it reaches Google Cloud Firestore.
- How does Ferentin secure Google Cloud Firestore access?
- Requests through the Google Cloud Firestore integration are covered by OAuth 2.0 consent, cloud iam authorization, no API keys and audit logging. These controls are applied by Ferentin, not by Google Cloud Firestore, so they hold across every connected agent.
- What permissions does the Google Cloud Firestore integration require?
- The Google Cloud Firestore integration requests 1 OAuth 2.0 scope: https://www.googleapis.com/auth/cloud-platform
- How do I connect Google Cloud Firestore to Ferentin?
- Open the Ferentin admin console, add Google Cloud Firestore as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the Google Cloud Firestore integration generally available?
- Yes. The Google Cloud Firestore integration is generally available on Ferentin, including the free tier.
Related integrations
3
Google Cloud Bigtable
Manage the Cloud Bigtable control plane: create and list instances and tables — governed by Cloud IAM.

Google Cloud SQL
Natural-language database operations on Cloud SQL (PostgreSQL/MySQL/SQL Server): run SQL, manage instances, users, and backups.

Google Cloud Spanner
Manage Cloud Spanner instances and databases and run multi-model (SQL + graph GQL) queries — governed by Cloud IAM.