Delv
CommunitySlow· 2mo4.3by LucasHild

BigQuery

Run BigQuery from Claude. Schema discovery, dry-run cost estimation, and parameterised queries against your warehouse.

C
Safety & Trust

Delv Safety Grade: C

Score 58/100 · assessed 2026-04-28

Maintainer45
Permissions75
Supply chain35
Transparency65
Incidents100

BigQuery MCP is a community server by solo developer LucasHild that grants Claude read and write access to your Google Cloud data warehouse. The server authenticates via service account credentials stored in an environment variable, then exposes schema discovery, query execution, and cost estimation tools. Permissions are reasonably scoped to database operations only, with no filesystem or shell access beyond the credential file. The main safety concern is the solo maintainer with limited track record and the lack of standard package distribution—you must clone and build from source. The credential handling is standard GCP practice but requires careful service account scoping on your end. No package manager distribution means no version pinning or supply chain verification. Transparency is adequate with open source code and basic documentation, but the bus factor is high. Suitable for personal projects where you control the service account permissions, less so for production environments without additional review.

Lethal Trifecta (prompt-injection exposure)

ONE OF THREE
Private dataYes
Reads secrets, credentials, private files
Untrusted inputNo
Ingests web pages, PRs, issues, emails
External commsNo
Can send data outbound

Cloud DB; queries return private rows. Wraps GCP creds.

Green flags

  • Permissions scoped to database operations only, no shell or filesystem writes
  • Dry-run cost estimation prevents accidental expensive queries
  • Standard GCP authentication pattern via service account JSON
  • Open source with visible code for credential handling review
  • Schema discovery is read-only and genuinely useful for exploration

Red flags

  • Solo maintainer with limited GitHub activity and no organisational backing
  • No npm/PyPI package—clone-and-build only with no supply chain verification
  • Requires GCP service account credentials with potentially broad warehouse access
  • No version pinning or release management visible in repository

Permissions requested

DB readDB writeAccess secretsOutbound network
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Review

BigQuery MCP gives Claude direct read access to your Google BigQuery warehouse. You authenticate via a service account JSON file, point it at your project, and Claude can then list datasets, inspect schemas, run queries, and estimate costs before execution. The schema discovery is genuinely useful: ask Claude to summarise your table structure and it'll pull column names, types, and descriptions without you writing a single SELECT statement. I'd reach for this when I'm exploring unfamiliar datasets or prototyping analytics queries in conversation. The dry-run cost estimation is the standout feature. BigQuery can get expensive fast, and being able to ask 'how much would this query cost?' before running it saves both money and surprises. Parameterised queries work as expected: you can template SQL with placeholders and Claude will fill them in based on context. The main quirk is that it's read-only by design. You can't CREATE, INSERT, or DELETE anything, which is sensible for an MCP server but means you'll still need the BigQuery console or a proper client for write operations. Authentication requires a service account with BigQuery Data Viewer and Job User roles at minimum. If your organisation locks down service account creation, you'll need to negotiate with whoever controls IAM. Performance depends entirely on your dataset size and query complexity. Claude doesn't cache results, so repeated queries hit BigQuery every time. For large tables, you'll want to guide Claude toward filtered queries or sampled data to avoid slow responses. The server itself is lightweight and doesn't add noticeable overhead. This is for people who already use BigQuery and want conversational access to their data. If you're not running a warehouse, this does nothing for you. If you are, it's a faster way to explore schemas and prototype queries than switching between Claude and the BigQuery console. The cost estimation alone justifies the setup time.
Verdict

Install this if you run BigQuery and spend time writing exploratory queries or explaining schemas. The dry-run cost checks and schema introspection are immediately useful. Skip it if you don't have a BigQuery project or if your data access is locked behind strict IAM policies you can't navigate.

Good at

  • Dry-run cost estimation prevents expensive query mistakes before execution.
  • Schema discovery works well for exploring unfamiliar datasets without writing SQL.
  • Read-only design means you can't accidentally corrupt production data.
  • Parameterised queries let Claude build dynamic SQL based on conversational context.

Watch out

  • Read-only, so you still need the BigQuery console or a client for any write operations.
  • Requires service account setup, which can be blocked by strict IAM policies.
  • No result caching, so repeated queries hit BigQuery every time and rack up costs.
  • Large table queries can time out unless you guide Claude toward filtered or sampled data.

Getting started

1. Create a Google Cloud service account with BigQuery Data Viewer and BigQuery Job User roles, download the JSON key file, and set GOOGLE_APPLICATION_CREDENTIALS to its path. 2. Install the server with `npx -y @lucashild/mcp-server-bigquery` and add it to your Claude Desktop config under mcpServers with the environment variable. 3. Restart Claude Desktop and ask it to list your BigQuery datasets to verify the connection. 4. Try a dry-run query by asking Claude to estimate the cost of a SELECT statement before running it. 5. Watch out for query timeouts on large tables. Guide Claude toward filtered queries or LIMIT clauses to keep response times reasonable.

Works with

Claude DesktopClaude Code

Similar MCPs