com.googleapis.sqladmin/mcp

Est-ce que com.googleapis.sqladmin/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.googleapis.sqladmin/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 15 outils

• clone_instance≈ 10592 tokens

  Create a Cloud SQL instance as a clone of a source instance. * This tool returns a long-running operation. Use the `get_operation` tool to poll its status until the operation completes. * The clone operation can take several minutes. Use a command line tool to pause for 30 seconds before rechecking the status.

  Paramètres, retour & exemple (4)

  Paramètres

  • body · ? · requis
  • project · string · requis
    Required. Project ID of the source Cloud SQL instance.
  • instance · string · requis
    Required. The ID of the Cloud SQL instance to be cloned (source). This does not include the project ID.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.

  Exemple d'appel

  {"name": "clone_instance", "arguments": {"body": "texte", "project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• create_backup≈ 9658 tokens

  Takes a backup on a Cloud SQL instance. Always populate the project and instance fields on the request. The location (region) and description of the backup may also be optionally provided, in which case the corresponding request fields should also be populated.

  Paramètres, retour & exemple (4)

  Paramètres

  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • instance · string · requis
    Required. Cloud SQL instance ID. This does not include the project ID.
  • location · string · optionnel
    Optional. Location of the backup run.
  • description · string · optionnel
    Optional. The description of this backup run.

  Exemple d'appel

  {"name": "create_backup", "arguments": {"project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• create_instance≈ 11384 tokens

  Initiates the creation of a Cloud SQL instance. * The tool returns a long-running operation. Use the `get_operation` tool to poll its status until the operation completes. * The instance creation operation can take several minutes. Use a command line tool to pause for 30 seconds before rechecking the status. * After you use the `create_instance` tool to create an instance, you can use the `create_user` tool to create an IAM user account for the user currently logged in to the project. * IMPORTANT: Set `ipv4_enabled` to 'false' if creating a Private Service Connect or a Private Service Access instance. * Set `free_trial` to 'true' to create a free trial instance. Free trial instances let you test majority of Cloud SQL features for up to 30 days without financial commitment. Subject to eligibility and availability. * The value of `data_api_access` is set to `ALLOW_DATA_API` by default. This setting lets you execute SQL statements using the `execute_sql` tool and the `executeSql` API. Unless otherwise specified, a newly created instance uses the default instance configuration of a development environment. The following is the default configuration for an instance in a development environment: ``` { "tier": "db-perf-optimized-N-2", "data_disk_size_gb": 100, "region": "us-central1", "database_version": "POSTGRES_18", "edition": "ENTERPRISE_PLUS", "availability_type": "ZONAL", "tags": [{"environment": "dev"}] } ``` The following configuration is recommended for an instance in a production environment: ``` { "tier": "db-perf-optimized-N-8", "data_disk_size_gb": 250, "region": "us-central1", "database_version": "POSTGRES_18", "edition": "ENTERPRISE_PLUS", "availability_type": "REGIONAL", "tags": [{"environment": "prod"}] } ``` The following instance configuration is recommended for SQL Server: ``` { "tier": "db-perf-optimized-N-8", "data_disk_size_gb": 250, "region": "us-central1", "database_version": "SQLSERVER_2022_STANDARD", "edition": "ENTERPRISE", "availability_type": "REGIONAL", "tags": [{"environment": "prod"}] } ```

  Paramètres, retour & exemple (15)

  Paramètres

  • name · string · requis
    Required. Name of the Cloud SQL instance. This does not include the project ID.
  • tags · object · optionnel
    Optional. Input only. Tag keys and tag values that are bound to this instance. You must represent each item in the map as: `"" : ""`. For example, a single resource can have the following tags: ``` "environment": "prod", ```
  • tier · string · optionnel
    Optional. The tier (or machine type) for this instance. If not specified: - For `ENTERPRISE_PLUS` edition, the default tier is `db-perf-optimized-N-2`, which gives you 2 vCPUs and 16 GB of RAM. - For `ENTERPRISE` edition, the default tier is `db-custom-2-3840`, which gives you 2 vCPUs and 3.75 GB of RAM. ENTERPRISE_PLUS edition needs to use N2 machine series. ENTERPRISE edition can use custom machine type names use the following format: db-custom-{CPUs}-{Memory}.
  • region · string · optionnel
    Optional. The geographical region of the Cloud SQL instance. For example, `us-central1`, `europe-west1`, and `asia-east1`. If not specified, the default value is `us-central1`.
  • edition · string · optionnel
    Optional. The edition of the instance, can be ENTERPRISE or ENTERPRISE_PLUS. If not specified: - For Postgres and Mysql, the default value is ENTERPRISE_PLUS. - For SQL Server, the default value is ENTERPRISE.
  • project · string · requis
    Required. Project ID of the project to which the newly created Cloud SQL instances should belong.
  • freeTrial · boolean · optionnel
    Optional. Whether the instance is a free trial instance. If true, the instance will be created with a free trial configuration.
  • ipv4Enabled · boolean · optionnel
    Optional. Whether to enable public IP for the instance. Enabling this flag makes the resource accessible from the public internet, which is a security risk if not properly managed. It is recommended to keep resources private whenever possible. This field defaults to 'false' if either `psc_mcp_config` or `psa_mcp_config` is set, or creating a Private Service Connect (PSC) or Private Service Access (PSA) instance.
  • psaMcpConfig · ? · optionnel
    Optional. Use this to connect to the Cloud SQL instance using Private Service Access.
  • pscMcpConfig · ? · optionnel
    Optional. Configuration for Private Service Connect (PSC) instance creation.
  • dataDiskSizeGb · string · optionnel
    Optional. Data disk size in GB. Default value is 100.
  • databaseVersion · string · optionnel
    Optional. The database engine type and version. The default value is `POSTGRES_18`. For Mysql, it can be `MYSQL_8_4`, `MYSQL_8_0`, `MYSQL_5_7`, etc. For Postgres, it can be `POSTGRES_18`, `POSTGRES_17`, `POSTGRES_16`, etc. For SQL Server, it can be SQLSERVER_2022_STANDARD, SQLSERVER_2022_EXPRESS, SQLSERVER_2022_ENTERPRISE, etc.
  • availabilityType · string · optionnel
    Optional. Availability type. Potential values: * `ZONAL`: The instance serves data from only one zone. Outages in that zone affect data accessibility. This is the default value. * `REGIONAL`: The instance can serve data from more than one zone in a region (it is highly available).
  • dataCacheEnabled · boolean · optionnel
    Optional. Whether data cache is enabled for the instance.
  • enableGoogleMlIntegration · boolean · optionnel
    Optional. When this parameter is set to true, Cloud SQL instances can connect to Vertex AI to pass requests for real-time predictions and insights to the AI. The default value is false. This applies only to Cloud SQL for MySQL and Cloud SQL for PostgreSQL instances.

  Exemple d'appel

  {"name": "create_instance", "arguments": {"name": "texte", "project": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• create_user≈ 10870 tokens

  Create a database user for a Cloud SQL instance. * This tool returns a long-running operation. Use the `get_operation` tool to poll its status until the operation completes. * When you use the `create_user` tool, specify the type of user: `CLOUD_IAM_USER`, `CLOUD_IAM_SERVICE_ACCOUNT`, or `BUILT_IN`. * By default the newly created user is assigned the `cloudsqlsuperuser` role, unless you specify other database roles explicitly in the request. * You can use a newly created user with the `execute_sql` tool if the user is a currently logged in IAM user. The `execute_sql` tool executes the SQL statements using the privileges of the database user logged in using IAM database authentication. The `create_user` tool has the following limitations: * To create a built-in user with password, use the `password_secret_version` field to provide password using the Google Cloud Secret Manager. The value of `password_secret_version` should be the resource name of the secret version, like `projects/12345/locations/us-central1/secrets/my-password-secret/versions/1` or `projects/12345/locations/us-central1/secrets/my-password-secret/versions/latest`. The caller needs to have `secretmanager.secretVersions.access` permission on the secret version. * The `create_user` tool doesn't support creating a user for SQL Server. To create an IAM user in PostgreSQL: * The database username must be the IAM user's email address and all lowercase. For example, to create user for PostgreSQL IAM user `example-user@example.com`, you can use the following request: ``` { "name": "example-user@example.com", "type": "CLOUD_IAM_USER", "instance":"test-instance", "project": "test-project" } ``` The created database username for the IAM user is `example-user@example.com`. To create an IAM service account in PostgreSQL: * The database username must be created without the `.gserviceaccount.com` suffix even though the full email address for the account is`service-account-name@project-id.iam.gserviceaccount.com`. For example, to create an IAM service account for PostgreSQL you can use the following request format: ``` { "name": "test@test-project.iam", "type": "CLOUD_IAM_SERVICE_ACCOUNT", "instance": "test-instance", "project": "test-project" } ``` The created database username for the IAM service account is `test@test-project.iam`. To create an IAM user or IAM service account in MySQL: * When Cloud SQL for MySQL stores a username, it truncates the @ and the domain name from the user or service account's email address. For example, `example-user@example.com` becomes `example-user`. * For this reason, you can't add two IAM users or service accounts with the same username but different domain names to the same Cloud SQL instance. * For example, to create user for the MySQL IAM user `example-user@example.com`, use the following request: ``` { "name": "example-user@example.com", "type": "CLOUD_IAM_USER", "instance": "test-instance", "project": "test-project" } ``` The created database username for the IAM user is `example-user`. * For example, to create the MySQL IAM service account `service-account-name@project-id.iam.gserviceaccount.com`, use the following request: ``` { "name": "service-account-name@project-id.iam.gserviceaccount.com", "type": "CLOUD_IAM_SERVICE_ACCOUNT", "instance": "test-instance", "project": "test-project" } ``` The created database username for the IAM service account is `service-account-name`.

  Paramètres, retour & exemple (6)

  Paramètres

  • name · string · requis
    Required. The name of the user in the Cloud SQL instance.
  • type · string · requis · BUILT_IN | CLOUD_IAM_USER | CLOUD_IAM_SERVICE_ACCOUNT | CLOUD_IAM_GROUP | CLOUD_IAM_GROUP_USER | CLOUD_IAM_GROUP_SERVICE_ACCOUNT | CLOUD_IAM_WORKFORCE_IDENTITY | ENTRAID_USER
    Required. The user type. It determines the method to authenticate the user during login. Use type `CLOUD_IAM_USER` when authenticating with a Cloud IAM user. Use type `CLOUD_IAM_SERVICE_ACCOUNT` when authenticating with a Cloud IAM service account. Use type `CLOUD_IAM_WORKFORCE_IDENTITY` when authenticating with a Cloud IAM workforce identity.
  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • instance · string · requis
    Required. Database instance ID. This does not include the project ID.
  • databaseRoles · array · optionnel
    Optional. Role memberships of the user. Default value is [cloudsqlsuperuser].
  • passwordSecretVersion · string · optionnel
    Optional. Input only. The resource name of the Secret Manager secret holding the password for the user, only needed if `type` is `BUILT_IN`. The expected format is `projects/{project}/secrets/{secret}/versions/{secret_version}`. The secret resource name will not be stored.

  Exemple d'appel

  {"name": "create_user", "arguments": {"name": "texte", "type": "BUILT_IN", "project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• execute_sql≈ 2460 tokens

  Execute any valid SQL statement, including data definition language (DDL), data control language (DCL), data query language (DQL), or data manipulation language (DML) statements, on a Cloud SQL instance. To support the `execute_sql` tool, a Cloud SQL instance must meet the following requirements: * The value of `data_api_access` must be set to `ALLOW_DATA_API`. * For built_in users password_secret_version must be set. * Otherwise, for IAM users, for a MySQL instance, the database flag `cloudsql_iam_authentication` must be set to `on`. For a PostgreSQL instance, the database flag `cloudsql.iam_authentication` must be set to `on`. * After you use the `create_instance` tool to create an instance, you can use the `create_user` tool to create an IAM user account for the user currently logged in to the project. The `execute_sql` tool has the following limitations: * If a SQL statement returns a response larger than 10 MB, then the response will be truncated. * The `execute_sql` tool has a default timeout of 30 seconds. If a query runs longer than 30 seconds, then the tool returns a `DEADLINE_EXCEEDED` error. If you receive errors similar to "IAM authentication is not enabled for the instance", then you can use the `get_instance` tool to check the value of the IAM database authentication flag for the instance. If you receive errors like "The instance doesn't allow using executeSql to access this instance", then you can use `get_instance` tool to check the `data_api_access` setting. When you receive authentication errors: 1. Check if the currently logged-in user account exists as an IAM user on the instance using the `list_users` tool. 2. If the IAM user account doesn't exist, then use the `create_user` tool to create the IAM user account for the logged-in user. 3. If the currently logged in user doesn't have the proper database user roles, then you can use `update_user` tool to grant database roles to the user. For example, `cloudsqlsuperuser` role can provide an IAM user with many required permissions. 4. Check if the currently logged in user has the correct IAM permissions assigned for the project. You can use `gcloud projects get-iam-policy [PROJECT_ID]` command to check if the user has the proper IAM roles or permissions assigned for the project. * The user must have `cloudsql.instance.login` permission to do automatic IAM database authentication. * The user must have `cloudsql.instances.executeSql` permission to execute SQL statements using the `execute_sql` tool or `executeSql` API. * Common IAM roles that contain the required permissions: Cloud SQL Instance User (`roles/cloudsql.instanceUser`) or Cloud SQL Admin (`roles/cloudsql.admin`) When receiving an `ExecuteSqlResponse`, always check the `message` and `status` fields within the response body. A successful HTTP status code doesn't guarantee full success of all SQL statements. The `message` and `status` fields will indicate if there were any partial errors or warnings during SQL statement execution.

  Paramètres, retour & exemple (7)

  Paramètres

  • user · string · optionnel
    Optional. The name of an existing database user to connect to the database. This field is used together with the `password_secret_version` field. When not both are set, the API caller's identity is used for database authentication.
  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • database · string · optionnel
    Optional. Name of the database on which the statement will be executed. For Postgres and SQL Server it's required, for MySQL it's optional. For Postgres, if your query is not scoped to an existing database, like list databases / create new database / grant roles, you can pass in default value as `postgres` (or `master` for SQL Server).
  • instance · string · requis
    Required. Database instance ID. This does not include the project ID.
  • sqlStatement · string · requis
    Required. SQL statements to run on the database. It can be a single statement or a sequence of statements separated by semicolons.
  • sqlCommenterEnabled · boolean · optionnel
    Optional. If set to true, enables sqlcommenter-style tagging. Automatically collects and populates mcp.server, mcp.tool, mcp.client, and user.identity. See https://google.github.io/sqlcommenter/ for detail about sqlcommenter.
  • passwordSecretVersion · string · optionnel
    Optional. The resource name of the Secret Manager secret holding the password for the user to log into the database. The secret should be created using the regional endpoint (for API) or from the Regional Secrets page (for UI), and stored in the same region as the Cloud SQL instance. The expected resource name format is `projects/{project}/locations/{location}/secrets/{secret}/versions/{secret_version}`. This field is used together with the `user` field. When not both are set, the API caller's identity is used for database authentication. The secret resource name will not be stored.

  Exemple d'appel

  {"name": "execute_sql", "arguments": {"project": "texte", "instance": "texte", "sqlStatement": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "results": [], "messages": [], "metadata": "texte"}}

• execute_sql_readonly≈ 2478 tokens

  Execute any valid read only SQL statement on a Cloud SQL instance. To support the `execute_sql_readonly` tool, a Cloud SQL instance must meet the following requirements: * The value of `data_api_access` must be set to `ALLOW_DATA_API`. * For a MySQL instance, the database flag `cloudsql_iam_authentication` must be set to `on`. For a PostgreSQL instance, the database flag `cloudsql.iam_authentication` must be set to `on`. * An IAM user account or IAM service account (`CLOUD_IAM_USER` or `CLOUD_IAM_SERVICE_ACCOUNT`) is required to call the `execute_sql_readonly` tool. The tool executes the SQL statements using the privileges of the database user logged with IAM database authentication. After you use the `create_instance` tool to create an instance, you can use the `create_user` tool to create an IAM user account for the user currently logged in to the project. The `execute_sql_readonly` tool has the following limitations: * If a SQL statement returns a response larger than 10 MB, then the response will be truncated. * The tool has a default timeout of 30 seconds. If a query runs longer than 30 seconds, then the tool returns a `DEADLINE_EXCEEDED` error. If you receive errors similar to "IAM authentication is not enabled for the instance", then you can use the `get_instance` tool to check the value of the IAM database authentication flag for the instance. If you receive errors like "The instance doesn't allow using executeSql to access this instance", then you can use `get_instance` tool to check the `data_api_access` setting. When you receive authentication errors: 1. Check if the currently logged-in user account exists as an IAM user on the instance using the `list_users` tool. 2. If the IAM user account doesn't exist, then use the `create_user` tool to create the IAM user account for the logged-in user. 3. If the currently logged in user doesn't have the proper database user roles, then you can use `update_user` tool to grant database roles to the user. For example, `cloudsqlsuperuser` role can provide an IAM user with many required permissions. 4. Check if the currently logged in user has the correct IAM permissions assigned for the project. You can use `gcloud projects get-iam-policy [PROJECT_ID]` command to check if the user has the proper IAM roles or permissions assigned for the project. * The user must have `cloudsql.instance.login` permission to do automatic IAM database authentication. * The user must have `cloudsql.instances.executeSql` permission to execute SQL statements using the `execute_sql_readonly` tool or `executeSql` API. * Common IAM roles that contain the required permissions: Cloud SQL Instance User (`roles/cloudsql.instanceUser`) or Cloud SQL Admin (`roles/cloudsql.admin`) When receiving an `ExecuteSqlResponse`, always check the `message` and `status` fields within the response body. A successful HTTP status code doesn't guarantee full success of all SQL statements. The `message` and `status` fields will indicate if there were any partial errors or warnings during SQL statement execution.

  Paramètres, retour & exemple (7)

  Paramètres

  • user · string · optionnel
    Optional. The name of an existing database user to connect to the database. This field is used together with the `password_secret_version` field. When not both are set, the API caller's identity is used for database authentication.
  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • database · string · optionnel
    Optional. Name of the database on which the statement will be executed. For Postgres and SQL Server it's required, for MySQL it's optional. For Postgres, if your query is not scoped to an existing database, like list databases / create new database / grant roles, you can pass in default value as `postgres` (or `master` for SQL Server).
  • instance · string · requis
    Required. Database instance ID. This does not include the project ID.
  • sqlStatement · string · requis
    Required. SQL statements to run on the database. It can be a single statement or a sequence of statements separated by semicolons.
  • sqlCommenterEnabled · boolean · optionnel
    Optional. If set to true, enables sqlcommenter-style tagging. Automatically collects and populates mcp.server, mcp.tool, mcp.client, and user.identity. See https://google.github.io/sqlcommenter/ for detail about sqlcommenter.
  • passwordSecretVersion · string · optionnel
    Optional. The resource name of the Secret Manager secret holding the password for the user to log into the database. The secret should be created using the regional endpoint (for API) or from the Regional Secrets page (for UI), and stored in the same region as the Cloud SQL instance. The expected resource name format is `projects/{project}/locations/{location}/secrets/{secret}/versions/{secret_version}`. This field is used together with the `user` field. When not both are set, the API caller's identity is used for database authentication. The secret resource name will not be stored.

  Exemple d'appel

  {"name": "execute_sql_readonly", "arguments": {"project": "texte", "instance": "texte", "sqlStatement": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "results": [], "messages": [], "metadata": "texte"}}

• get_instance≈ 20790 tokens

  Get the details of a Cloud SQL instance.

  Paramètres, retour & exemple (3)

  Paramètres

  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • instance · string · requis
    Required. Database instance ID. This does not include the project ID.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.

  Exemple d'appel

  {"name": "get_instance", "arguments": {"project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"etag": "texte", "kind": "texte", "name": "texte", "tags": {}, "nodes": [], "state": "SQL_INSTANCE_STATE_UNSPECIFIED", "region": "texte", "dnsName": "texte", "gceZone": "texte", "project": "texte", "dnsNames": [], "selfLink": "texte"}}

• get_operation≈ 9614 tokens

  Get the status of a long-running operation. A long-running operation can take several minutes to complete. If an operation takes an extended amount of time, then use a command line tool to pause for 30 seconds before rechecking the status of the operation.

  Paramètres, retour & exemple (3)

  Paramètres

  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.
  • operation · string · requis
    Required. Instance operation ID.

  Exemple d'appel

  {"name": "get_operation", "arguments": {"project": "texte", "operation": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• import_data≈ 11966 tokens

  Import data into a Cloud SQL instance. If the file doesn't start with `gs://`, then the assumption is that the file is stored locally. If the file is local, then the file must be uploaded to Cloud Storage before you can make the actual `import_data` call. To upload the file to Cloud Storage, you can use the `gcloud` or `gsutil` commands. Before you upload the file to Cloud Storage, consider whether you want to use an existing bucket or create a new bucket in the provided project. After the file is uploaded to Cloud Storage, the instance service account must have sufficient permissions to read the uploaded file from the Cloud Storage bucket. This can be accomplished as follows: 1. Use the `get_instance` tool to get the email address of the instance service account. From the output of the tool, get the value of the `serviceAccountEmailAddress` field. 2. Grant the instance service account the `storage.objectAdmin` role on the provided Cloud Storage bucket. Use a command like `gcloud storage buckets add-iam-policy-binding` or a request to the Cloud Storage API. It can take from two to up to seven minutes or more for the role to be granted and the permissions to be propagated to the service account in Cloud Storage. If you encounter a permissions error after updatingthe IAM policy, then wait a few minutes and try again. After permissions are granted, you can import the data. We recommend that you leave optional parameters empty and use the system defaults. The file type can typically be determined by the file extension. For example, if the file is a SQL file, `.sql` or `.csv` for CSV file. The following is a sample SQL `importContext` for MySQL. ``` { "uri": "gs://sample-gcs-bucket/sample-file.sql", "kind": "sql#importContext", "fileType": "SQL" } ``` There is no `database` parameter present for MySQL since the database name is expected to be present in the SQL file. Specify only one URI. No other fields are required outside of `importContext`. For PostgreSQL, the `database` field is required. The following is a sample PostgreSQL `importContext` with the `database` field specified. ``` { "uri": "gs://sample-gcs-bucket/sample-file.sql", "kind": "sql#importContext", "fileType": "SQL", "database": "sample-db" } ``` The `import_data` tool returns a long-running operation. Use the `get_operation` tool to poll its status until the operation completes.

  Paramètres, retour & exemple (4)

  Paramètres

  • body · ? · optionnel
  • project · string · optionnel
    Project ID of the project that contains the instance.
  • instance · string · optionnel
    Cloud SQL instance ID. This does not include the project ID.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.

  Exemple d'appel

  {"name": "import_data", "arguments": {"body": "texte", "project": "texte", "instance": "texte", "location": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• list_instances≈ 1378 tokens

  List all Cloud SQL instances in the project.

  Paramètres, retour & exemple (5)

  Paramètres

  • filter · string · optionnel
    A filter expression that filters resources listed in the response. The expression is in the form of field:value. For example, 'instanceType:CLOUD_SQL_INSTANCE'. Fields can be nested as needed as per their JSON representation, such as 'settings.userLabels.auto_start:true'. Multiple filter queries are space-separated. For example. 'state:RUNNABLE instanceType:CLOUD_SQL_INSTANCE'. By default, each expression is an AND expression. However, you can include AND and OR expressions explicitly.
  • project · string · optionnel
    Project ID of the project for which to list Cloud SQL instances.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.
  • pageToken · string · optionnel
    A previously-returned page token representing part of the larger set of results to view.
  • maxResults · integer · optionnel
    The maximum number of instances to return. The service may return fewer than this value. If unspecified, at most 500 instances are returned. The maximum value is 1000; values above 1000 are coerced to 1000.

  Exemple d'appel

  {"name": "list_instances", "arguments": {"filter": "texte", "project": "texte", "location": "texte", "pageToken": "texte", "maxResults": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "items": [], "warnings": [], "nextPageToken": "texte"}}

• list_users≈ 1560 tokens

  List all database users for a Cloud SQL instance.

  Paramètres, retour & exemple (3)

  Paramètres

  • project · string · optionnel
    Project ID of the project that contains the instance.
  • instance · string · optionnel
    Database instance ID. This does not include the project ID.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.

  Exemple d'appel

  {"name": "list_users", "arguments": {"project": "texte", "instance": "texte", "location": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "items": [], "nextPageToken": "texte"}}

• postgres_upgrade_precheck≈ 11707 tokens

  Checks if a Cloud SQL for PostgreSQL instance is ready for a major version upgrade to the specified target version. The `target_database_version` MUST be provided in the request (e.g., `POSTGRES_15`). This tool helps identify potential issues *before* attempting the actual upgrade, reducing the risk of failure or downtime. This tool is only supported for PostgreSQL primary instances and does not run on read replicas. The precheck typically evaluates: - Database schema compatibility with the target version. - Cloud SQL limitations and unsupported features. - Instance resource constraints (e.g., number of relations). - Compatibility of current database settings and extensions. - Overall instance health and readiness. This tool returns a long-running operation. Use the `get_operation` tool with the operation name returned by this call to poll its status. IMPORTANT: Once the operation status is DONE, the detailed precheck results are available within the `Operation` resource. You will need to inspect the response from `get_operation`. The findings are located in the `pre_check_major_version_upgrade_context.pre_check_response` field. The findings are structured, indicating: - INFO: General information. - WARNING: Potential issues that don't block the upgrade but should be reviewed. - ERROR: Critical issues that MUST be resolved before attempting the upgrade. Each finding should include a message and any required actions. Addressing any reported issues is crucial before proceeding with the major version upgrade. If `pre_check_response` is empty or missing, it indicates that no issues were identified during the precheck. Running this precheck does not impact the instance's availability.

  Paramètres, retour & exemple (4)

  Paramètres

  • body · ? · requis
    Required. The context for request to perform the pre-check major version upgrade operation.
  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • instance · string · requis
    Required. Cloud SQL instance ID. This does not include the project ID.
  • location · string · optionnel
    Optional. Region of the Cloud SQL instance.

  Exemple d'appel

  {"name": "postgres_upgrade_precheck", "arguments": {"body": "texte", "project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• restore_backup≈ 10030 tokens

  Restores a backup to a Cloud SQL instance. The target_instance and target_project must be provided and populated in the request. The backup identifier can be provided in several ways: 1. A backup_run_id (which is an integer). 2. A backup URI of the format `projects/{project-id}/backups/{backup-uid}`. 3. A backup URI of the format `projects/{project-id}/locations/{location}/backupVaults/{backupvault}/dataSources/{datasource}/backups/{backup-uid}`. Use the identifier to populate the `backup_id` field in the request. The source_project must be populated in the request. If the identifier is a backup_run_id, the source_project will be provided. If the identifier is a backup URI, the source_project may need to be extracted from the URI. Do not confuse the extracted source_project with the target_project, which will be provided in other ways. In addition, if the identifier is a backup_run_id, the source_instance must be provided and populated in the request. Do not try to create the instance before the restore, the restore itself will create the instance if needed. Confirm the parameters with the user before executing the restore.

  Paramètres, retour & exemple (5)

  Paramètres

  • backupId · string · requis
    Required. The identifier of the backup to restore. This will be one of the following: 1. An int64 containing a backup_run_id. 2. A backup name of the format 'projects/{project}/backups/{backup-uid}'. 3. A backupDR name of the format 'projects/{project}/locations/{location}/backupVaults/{backupvault}/dataSources/{datasource}/backups/{backup-uid}'.
  • sourceProject · string · requis
    Required. The project ID of the source instance containing the backup.
  • targetProject · string · requis
    Required. Project ID of the target project.
  • sourceInstance · string · optionnel
    Optional. The Cloud SQL instance ID of the source instance containing the backup. Only necessary if the backup_id is a backup_run_id.
  • targetInstance · string · requis
    Required. Cloud SQL instance ID of the target. This does not include the project ID.

  Exemple d'appel

  {"name": "restore_backup", "arguments": {"backupId": "texte", "sourceProject": "texte", "targetProject": "texte", "targetInstance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• update_instance≈ 10768 tokens

  Partially updates the configuration settings of a Cloud SQL instance. * This tool returns a long-running operation. Use the `get_operation` tool to poll its status until the operation completes. * Some update operations, such as changing the edition upgrade or instance tier, etc might cause the instance to restart, resulting in downtime. Before you proceed with such operations, get confirmation from the user.

  Paramètres, retour & exemple (12)

  Paramètres

  • tier · string · optionnel
    Optional. The tier (or machine type) for this instance. format: db-custom-{CPUs}-{Memory}.
  • edition · string · optionnel
    Optional. The edition of the instance, can be ENTERPRISE or ENTERPRISE_PLUS.
  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • instance · string · requis
    Required. Cloud SQL instance ID. This does not include the project ID.
  • ipv4Enabled · boolean · optionnel
    Optional. Whether to enable public IP for the instance. Enabling this flag makes the resource accessible from the public internet, which is a security risk if not properly managed. It is recommended to keep resources private whenever possible.
  • psaMcpConfig · ? · optionnel
    Optional. Configuration for Private Service Access (PSA) instance update.
  • pscMcpConfig · ? · optionnel
    Optional. Configuration for Private Service Connect (PSC) instance update.
  • dataApiAccess · string · optionnel · DATA_API_ACCESS_UNSPECIFIED | DISALLOW_DATA_API | ALLOW_DATA_API
    Optional. The settings for controlling data API access to an instance.
  • databaseFlags · array · optionnel
    Optional. The database flags.
  • dataDiskSizeGb · string · optionnel
    Optional. Data disk size in GB.
  • dataCacheConfig · ? · optionnel
    Optional. Configuration for the data cache. A data cache can improve performance for read-heavy workloads by caching frequently accessed data in-memory.
  • googleMlIntegrationEnabled · boolean · optionnel
    Optional. Enables Cloud SQL instances to connect to Vertex AI to pass requests for real-time predictions and insights to the AI. The default value is false. This applies only to Cloud SQL for MySQL and Cloud SQL for PostgreSQL instances.

  Exemple d'appel

  {"name": "update_instance", "arguments": {"project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

• update_user≈ 10523 tokens

  Update a database user for a Cloud SQL instance. A common use case for the `update_user` is to grant a user the `cloudsqlsuperuser` role, which can provide a user with many required permissions. This tool only supports updating users to assign database roles. * This tool returns a long-running operation. Use the `get_operation` tool to poll its status until the operation completes. * Before calling the `update_user` tool, always check the existing configuration of the user such as the user type with `list_users` tool. * As a special case for MySQL, if the `list_users` tool returns a full email address for the `iamEmail` field, for example `{name=test-account, iamEmail=test-account@project-id.iam.gserviceaccount.com}`, then in your `update_user` request, use the full email address in the `iamEmail` field in the `name` field of your toolrequest. For example, `name=test-account@project-id.iam.gserviceaccount.com`. Key parameters for updating user roles: * `database_roles`: A list of database roles to be assigned to the user. * `revokeExistingRoles`: A boolean field (default: false) that controls how existing roles are handled. How role updates work: 1. **If `revokeExistingRoles` is true:** * Any existing roles granted to the user but NOT in the provided `database_roles` list will be REVOKED. * Revoking only applies to non-system roles. System roles like `cloudsqliamuser` etc won't be revoked. * Any roles in the `database_roles` list that the user does NOT already have will be GRANTED. * If `database_roles` is empty, then ALL existing non-system roles are revoked. 2. **If `revokeExistingRoles` is false (default):** * Any roles in the `database_roles` list that the user does NOT already have will be GRANTED. * Existing roles NOT in the `database_roles` list are KEPT. * If `database_roles` is empty, then there is no change to the user's roles. Examples: * Existing Roles: `[roleA, roleB]` * Request: `database_roles: [roleB, roleC], revokeExistingRoles: true` * Result: Revokes `roleA`, Grants `roleC`. User roles become `[roleB, roleC]`. * Request: `database_roles: [roleB, roleC], revokeExistingRoles: false` * Result: Grants `roleC`. User roles become `[roleA, roleB, roleC]`. * Request: `database_roles: [], revokeExistingRoles: true` * Result: Revokes `roleA`, Revokes `roleB`. User roles become `[]`. * Request: `database_roles: [], revokeExistingRoles: false` * Result: No change. User roles remain `[roleA, roleB]`.

  Paramètres, retour & exemple (7)

  Paramètres

  • host · string · optionnel
    Optional. Host of the user in the instance.
  • name · string · requis
    Required. Name of the user in the instance.
  • type · string · requis · BUILT_IN | CLOUD_IAM_USER | CLOUD_IAM_SERVICE_ACCOUNT | CLOUD_IAM_GROUP | CLOUD_IAM_GROUP_USER | CLOUD_IAM_GROUP_SERVICE_ACCOUNT | CLOUD_IAM_WORKFORCE_IDENTITY | ENTRAID_USER
    Required. The user type. It determines the method to authenticate the user during login. The default is the database's built-in user type.
  • project · string · requis
    Required. Project ID of the project that contains the instance.
  • instance · string · requis
    Required. Database instance ID. This does not include the project ID.
  • databaseRoles · array · optionnel
    Optional. List of database roles to grant to the user. body.database_roles will be ignored for update request.
  • revokeExistingRoles · boolean · optionnel
    Optional. revoke the existing roles granted to the user.

  Exemple d'appel

  {"name": "update_user", "arguments": {"name": "texte", "type": "BUILT_IN", "project": "texte", "instance": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"kind": "texte", "name": "texte", "user": "texte", "error": "texte", "status": "SQL_OPERATION_STATUS_UNSPECIFIED", "endTime": "texte", "selfLink": "texte", "targetId": "texte", "startTime": "texte", "apiWarning": "texte", "insertTime": "texte", "targetLink": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://sqladmin.googleapis.com/mcp