Google Cloud Spanner
GAManage Cloud Spanner instances and databases and run multi-model (SQL + graph GQL) queries — governed by Cloud IAM.
How it works
Every agent request passes through Ferentin policy before it reaches Google Cloud Spanner.- AI agentAsks for something
- Ferentin policies
- OAuth 2.0 consent
- Cloud iam authorization
- No API keys
- Audit logging
- Google Cloud Spanner MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What you can do with Google Cloud Spanner
Discover
Search and browse what exists, without opening the content itself.
3 tools
Access
Read content and metadata, subject to masking policy.
4 tools
Manage
Create, update, organise and remove items.
7 tools
Technical capabilities15 tools
Discover
- list_instances
- list_configs
- list_databases
Access
- get_instance
- get_config
- get_database_ddl
- get_operation
Manage
- create_instance
- update_instance
- create_database
- create_session
- execute_sql
- execute_sql_readonly
- update_database_schema
Other
- commit
Overview
Cloud Spanner is Google Cloud's globally-distributed, strongly-consistent relational database with unified multi-model support (relational SQL, Spanner Graph GQL, and semantic/vector data).
Ferentin integration
Ferentin's Google Cloud Spanner MCP server connects agents through OAuth2 + Cloud IAM, with tools for instance/config/database management, DDL schema evolution, and session-based query execution. Graph (GQL) and semantic queries run through the SQL-execution tools. SQL calls are auto request-tagged for auditing.
Frequently asked about Google Cloud Spanner
- What can AI agents do with Google Cloud Spanner through Ferentin?
- Ferentin exposes 15 Google Cloud Spanner MCP tools to your AI agents, grouped as Discover (3 tools), Access (4 tools) and Manage (7 tools). Every call is checked against your Ferentin policies before it reaches Google Cloud Spanner.
- How does Ferentin secure Google Cloud Spanner access?
- Requests through the Google Cloud Spanner integration are covered by OAuth 2.0 consent, cloud iam authorization, no API keys and audit logging. These controls are applied by Ferentin, not by Google Cloud Spanner, so they hold across every connected agent.
- What permissions does the Google Cloud Spanner integration require?
- The Google Cloud Spanner integration requests 2 OAuth 2.0 scopes: https://www.googleapis.com/auth/spanner.admin (admin access); https://www.googleapis.com/auth/spanner.data
- How do I connect Google Cloud Spanner to Ferentin?
- Open the Ferentin admin console, add Google Cloud Spanner as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the Google Cloud Spanner integration generally available?
- Yes. The Google Cloud Spanner integration is generally available on Ferentin, including the free tier.
Related integrations
3
Google Cloud SQL
Natural-language database operations on Cloud SQL (PostgreSQL/MySQL/SQL Server): run SQL, manage instances, users, and backups.
Google AlloyDB for PostgreSQL
Manage AlloyDB for PostgreSQL and run SQL, DDL, and vector-similarity search — governed by Cloud IAM.
Google BigQuery
Query and explore BigQuery data warehouses. Discover datasets/tables, inspect schema, and run read-only SQL — governed by Cloud IAM.