Authenticated Cloud Run MCP Server

Deploys a Model Context Protocol Server-Sent Events (SSE) deployment on Google Cloud Run with IAM authentication.

Remote serverstreamable-httpGo 22

What is the Authenticated Cloud Run MCP server?

Authenticated Cloud Run MCP server exists for a simple reason — assistants are far more useful when they can act on Authenticated Cloud Run directly instead of describing what you should do. Deploys a Model Context Protocol Server-Sent Events (SSE) deployment on Google Cloud Run with IAM authentication.

What you get

At the moment (03/04/2024) MCP is still addressing Authentication and Authorization. They plan to complete this in H1 2025. The issue is, I want to share my MCP server with my team NOW. So here we are. The only immediate answer to use a SSE MCP server in Cursor, etc.. right now is a network layer based solution (e.g., a proxy). Basic auth, api keys, forget about it.

Setting it up

Being a remote server, there is no local install. You register the endpoint with your client, authorise it once, and the tools appear.

What the assistant can call

Once Authenticated Cloud Run is connected, these are the calls the assistant has available:

  • PROJECT_ID — Your Google Cloud project ID
  • REGION — Your preferred GCP region
  • SERVICE_ACCOUNT_EMAIL — The service account email with appropriate permissions

Configuration and credentials

You will need one environment variable: PROJECT_ID. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.

Before you rely on it

  • Your data travels to the provider's service, so the usual questions apply about what you send and what they retain.
  • MCP clients confirm each tool call by default. Leave that on until you have watched what the authenticated cloud run mcp server does with a few real requests.

Choosing this one

This sits in the cloud and infrastructure group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Authenticated Cloud Run's toolset — PROJECT_ID, REGION, SERVICE_ACCOUNT_EMAIL — is a fair guide to whether it matches your workflow. It is maintained by the-freetech-company; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against Authenticated Cloud Run's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Available tools

ToolWhat it does
PROJECT_IDYour Google Cloud project ID
REGIONYour preferred GCP region
SERVICE_ACCOUNT_EMAILThe service account email with appropriate permissions

How to install the Authenticated Cloud Run MCP server

{
  "mcpServers": {
    "authenticated-cloud-run": {
      "command": "npx",
      "args": ["-y", "ts-node"],
      "env": {
        "PROJECT_ID": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

VariableDescriptionRequired
PROJECT_IDConfiguration value read at startup.Optional

Example prompts to try

  • Use Authenticated Cloud Run to PROJECT ID.
  • Use Authenticated Cloud Run to REGION.
  • Use Authenticated Cloud Run to SERVICE ACCOUNT EMAIL.

Frequently asked questions

Yes! The solution comes with a simplified deployment script and step-by-step instructions for integrating with Cursor. You just need Docker, the gcloud CLI, and a few configuration updates.