GCP
tsh-stack-gcp bundles three Google Cloud MCP servers. All three are stdio servers
launched with npx -y.
| Server | npm package | Purpose | Can mutate |
|---|---|---|---|
gcp-gcloud | @google-cloud/gcloud-mcp | Live project state through gcloud | Yes |
gcp-observability | @google-cloud/observability-mcp | Monitoring and logging configuration | Read-oriented |
gcp-storage | @google-cloud/storage-mcp | Cloud Storage bucket inspection | Read-oriented |
Bundled by tsh-stack-gcp, which installs at project
scope. Cloud servers ship with the cloud's own plugin, so no cloud server appears in a
repository that does not install that plugin.
Neither the plugin's .mcp.json nor its README names prerequisites. The servers' own
READMEs do: Node.js 20 or newer and the gcloud CLI on the machine, signed in with
gcloud auth login. observability-mcp also needs Application Default Credentials, set with
gcloud auth application-default login. The servers act with your own Google Cloud
permissions.
gcp-gcloud can mutate
gcp-gcloud can run mutating gcloud commands. Nothing in this plugin does: both
skills are restricted to list, describe and get. That restriction is an
instruction, not a technical guarantee. If you need a hard boundary, drop the server
from .mcp.json and let the skills fall back to the gcloud CLI through Bash, where
your own permission rules apply.
What uses them
| Component | How it uses the servers |
|---|---|
auditing-gcp-cost | gcp-gcloud first, restricted to list, describe and get, with the gcloud CLI as fallback when the server is unavailable; gcp-storage for bucket inventory, lifecycle policies and storage classes; gcp-observability for logging and monitoring configuration, including retention and exclusions |
devops-engineer | May use a cloud server that can mutate, such as gcp-gcloud, only for list, describe and get |
infrastructure-auditor | Uses gcp-gcloud for inventory only; the read-only restriction covers MCP servers as much as shell commands |
implementing-gcp-terraform
and auditing-gcp-cost get Terraform Google provider documentation, machine types
and pricing tiers from Context7, which tsh-core
bundles.