Skip to Content

BigQuery MCP Server

This guide walks through connecting the BigQuery MCP server to auxilia. BigQuery uses Google OAuth 2.0 with static credentials.

1. Create a Google Cloud OAuth client

  1. Go to the Google Cloud Console 
  2. Select (or create) your project
  3. APIs & ServicesCredentials
  4. Create CredentialsOAuth client ID
  5. If prompted, configure the OAuth consent screen first:
    • User Type: External (or Internal for Google Workspace)
    • App name: auxilia MCP
    • Scopes: add https://www.googleapis.com/auth/bigquery
  6. Back in Create OAuth client ID:
    • Application type: Web application
    • Name: auxilia MCP
    • Authorized redirect URIs:
      <FRONTEND_URL>/api/backend/mcp-servers/oauth/callback
      For local development:
      http://localhost:3000/api/backend/mcp-servers/oauth/callback
  7. Click Create
  8. Copy the Client ID and Client Secret

2. Enable the BigQuery API

gcloud services enable bigquery.googleapis.com \ --project=your-project-id

3. Install the BigQuery MCP server

In auxilia:

  1. Find BigQuery in the official servers list
  2. Click Install
  3. Enter the Client ID and Client Secret from step 1

4. Connect your account

  1. Click Connect on the BigQuery server card
  2. Pick your Google account on the consent screen
  3. Grant BigQuery access

auxilia requests the https://www.googleapis.com/auth/bigquery scope automatically.

5. Add to an agent

  1. Open an agent’s configuration page
  2. Add MCP ServerBigQuery
  3. Configure tool settingsexecute_sql_readonly is safe to auto-approve; execute_sql (write) is a good candidate for needs approval

Available tools

The BigQuery MCP server provides tools for:

  • list_dataset_ids, list_table_ids
  • get_dataset_info, get_table_info
  • execute_sql_readonly, execute_sql

Troubleshooting

”Access denied”

  • The BigQuery API must be enabled in your Google Cloud project
  • The Google account you connected must have BigQuery permissions on the target project
  • The OAuth consent screen must include the BigQuery scope

”Redirect URI mismatch”

The redirect URI in your Google Cloud OAuth client must match <FRONTEND_URL>/api/backend/mcp-servers/oauth/callback exactly — no trailing slashes, no protocol mismatches.