Google Cloud Firestore
Generally AvailableFerentin's Google Firestore MCP server connects agents through OAuth2 + Cloud IAM, with tools for document CRUD, collection queries, database lifecycle, and composite-index management. Access is scoped by the signing-in identity's IAM grants (roles/datastore.user + roles/mcp.toolUser).
- Database
- NoSQL
- Document Store
- Authentication
- OAuth 2.0
- Hosting
- Vendor-hosted endpoint
- Required scopes
- 1
- Data actions
- Read and write
How it works
Every agent request passes through Ferentin policy before it reaches Google Cloud Firestore.
- AI agentAsks for something
- Ferentin policies
- OAuth 2.0 consent
- Cloud iam authorization
- No API keys
- Audit logging
- Google Cloud Firestore MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What agents can do
25 tools · you choose which ones agents may callSearch and browse what exists, without opening the content itself.
- list_documents
- list_collections
- query_collection
- list_databases
- list_indexes
- list_backups
- list_backup_schedules
Permissions requested
The OAuth 2.0 scopes Google Cloud Firestore asks you to approve when you connect.
| Scope | Access |
|---|---|
| https://www.googleapis.com/auth/cloud-platform | Not rated |
Before you connect
- Google does not support Dynamic Client Registration (DCR) — each tenant must create its own OAuth client in Google Cloud Console.
- Authentication is OAuth 2.0 + Google Cloud IAM. API keys are not accepted; access is enforced by the signing-in identity's IAM roles.
- Use access_type=offline to receive a refresh token for long-lived access.
- Requires roles/mcp.toolUser and roles/datastore.user.
2 more technical notes
- Database and project are passed as tool arguments, not URL query params.
- Fine-grained access can be further constrained with Cloud IAM Deny policies.
About Google Cloud Firestore
Firestore is Google Cloud's serverless, horizontally-scalable NoSQL document database for mobile, web, and server development.
Frequently asked about Google Cloud Firestore
- What can AI agents do with Google Cloud Firestore through Ferentin?
- Ferentin exposes 25 Google Cloud Firestore MCP tools to your AI agents, grouped as Discover (7 tools), Access (5 tools) and Manage (13 tools). Every call is checked against your Ferentin policies before it reaches Google Cloud Firestore.
- How is Google Cloud Firestore access secured?
- Requests through the Google Cloud Firestore integration are covered by OAuth 2.0 consent, cloud iam authorization, no API keys and audit logging. These controls are applied by Ferentin, not by Google Cloud Firestore, so they hold across every connected agent.
- What permissions does the Google Cloud Firestore integration require?
- The Google Cloud Firestore integration requests 1 OAuth 2.0 scope: https://www.googleapis.com/auth/cloud-platform
- How do I connect Google Cloud Firestore to Ferentin?
- Open the Ferentin admin console, add Google Cloud Firestore as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the Google Cloud Firestore integration generally available?
- Yes. The Google Cloud Firestore integration is generally available on Ferentin, including the free tier.
Related integrations
3
Google Cloud Bigtable
Manage the Cloud Bigtable control plane: create and list instances and tables — governed by Cloud IAM.
Google Cloud SQL
Natural-language database operations on Cloud SQL (PostgreSQL/MySQL/SQL Server): run SQL, manage instances, users, and backups.
Google Cloud Spanner
Manage Cloud Spanner instances and databases and run multi-model (SQL + graph GQL) queries — governed by Cloud IAM.