BigQuery
Run BigQuery from Claude. Schema discovery, dry-run cost estimation, and parameterised queries against your warehouse.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
BigQuery MCP is a community server by solo developer LucasHild that grants Claude read and write access to your Google Cloud data warehouse. The server authenticates via service account credentials stored in an environment variable, then exposes schema discovery, query execution, and cost estimation tools. Permissions are reasonably scoped to database operations only, with no filesystem or shell access beyond the credential file. The main safety concern is the solo maintainer with limited track record and the lack of standard package distribution—you must clone and build from source. The credential handling is standard GCP practice but requires careful service account scoping on your end. No package manager distribution means no version pinning or supply chain verification. Transparency is adequate with open source code and basic documentation, but the bus factor is high. Suitable for personal projects where you control the service account permissions, less so for production environments without additional review.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREECloud DB; queries return private rows. Wraps GCP creds.
Green flags
- Permissions scoped to database operations only, no shell or filesystem writes
- Dry-run cost estimation prevents accidental expensive queries
- Standard GCP authentication pattern via service account JSON
- Open source with visible code for credential handling review
- Schema discovery is read-only and genuinely useful for exploration
Red flags
- Solo maintainer with limited GitHub activity and no organisational backing
- No npm/PyPI package—clone-and-build only with no supply chain verification
- Requires GCP service account credentials with potentially broad warehouse access
- No version pinning or release management visible in repository
Permissions requested
Review
Install this if you run BigQuery and spend time writing exploratory queries or explaining schemas. The dry-run cost checks and schema introspection are immediately useful. Skip it if you don't have a BigQuery project or if your data access is locked behind strict IAM policies you can't navigate.
Good at
- Dry-run cost estimation prevents expensive query mistakes before execution.
- Schema discovery works well for exploring unfamiliar datasets without writing SQL.
- Read-only design means you can't accidentally corrupt production data.
- Parameterised queries let Claude build dynamic SQL based on conversational context.
Watch out
- Read-only, so you still need the BigQuery console or a client for any write operations.
- Requires service account setup, which can be blocked by strict IAM policies.
- No result caching, so repeated queries hit BigQuery every time and rack up costs.
- Large table queries can time out unless you guide Claude toward filtered or sampled data.
Getting started
Works with
Similar MCPs
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.
- PostgresQuery Postgres databases with natural language. Read-only access by default - the agent sees your schema and runs SELECT queries safely.
- ClickHouseClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.