Cloud Run MCP Server 1.10.0 security intelligence

Independent inventory

Observed 2026-08-14T07:40:40.261Z using mcpSecurity-inventory. Protocol 2025-06-18.

Tool	Category	Risk
create_projectCreates a new GCP project and attempts to attach it to the first available billing account. A project ID can be optionally specified; otherwise it will be automatically generated. Input schema { "type": "object", "properties": { "projectId": { "type": "string", "description": "Optional. The desired ID for the new GCP project. If not provided, an ID will be auto-generated." } }, "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—
deploy_container_imageDeploys a container image to Cloud Run. Use this tool if the user provides a container image URL. Input schema { "type": "object", "properties": { "project": { "type": "string", "description": "Google Cloud project ID. Do not select it yourself, make sure the user provides or confirms the project ID." }, "region": { "type": "string", "default": "europe-west1", "description": "Region to deploy the service to" }, "service": { "type": "string", "description": "Name of the Cloud Run service to deploy to" }, "imageUrl": { "type": "string", "description": "The URL of the container image to deploy (e.g. \"gcr.io/cloudrun/hello\")" } }, "required": [ "project", "imageUrl" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—
deploy_file_contentsDeploy files to Cloud Run by providing their contents directly. Takes an array of file objects containing filename and content. Use this tool if the files only exist in the current chat context. Input schema { "type": "object", "properties": { "project": { "type": "string", "description": "Google Cloud project ID. Leave unset for the app to be deployed in a new project. If provided, make sure the user confirms the project ID they want to deploy to." }, "region": { "type": "string", "default": "europe-west1", "description": "Region to deploy the service to" }, "service": { "type": "string", "description": "Name of the Cloud Run service to deploy to" }, "files": { "type": "array", "items": { "type": "object", "properties": { "filename": { "type": "string", "description": "Name and path of the file (e.g. \"src/index.js\" or \"data/config.json\")" }, "content": { "type": "string", "description": "Text content of the file" } }, "required": [ "filename" ], "additionalProperties": false }, "description": "Array of file objects containing filename and content" } }, "required": [ "project", "files" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—
deploy_local_folderDeploy a local folder to Cloud Run. Takes an absolute folder path from the local filesystem that will be deployed. Use this tool if the entire folder content needs to be deployed. Input schema { "type": "object", "properties": { "project": { "type": "string", "description": "Google Cloud project ID. Do not select it yourself, make sure the user provides or confirms the project ID." }, "region": { "type": "string", "default": "europe-west1", "description": "Region to deploy the service to" }, "service": { "type": "string", "description": "Name of the Cloud Run service to deploy to" }, "folderPath": { "type": "string", "description": "Absolute path to the folder to deploy (e.g. \"/home/user/project/src\")" } }, "required": [ "project", "folderPath" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—
get_serviceGets details for a specific Cloud Run service. Input schema { "type": "object", "properties": { "project": { "type": "string", "description": "Google Cloud project ID containing the service" }, "region": { "type": "string", "description": "Region where the service is located", "default": "europe-west1" }, "service": { "type": "string", "description": "Name of the Cloud Run service" } }, "required": [ "project", "service" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—
get_service_logGets Logs and Error Messages for a specific Cloud Run service. Input schema { "type": "object", "properties": { "project": { "type": "string", "description": "Google Cloud project ID containing the service" }, "region": { "type": "string", "description": "Region where the service is located", "default": "europe-west1" }, "service": { "type": "string", "description": "Name of the Cloud Run service" } }, "required": [ "project", "service" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—
list_projectsLists available GCP projects Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": {} }	—	—
list_servicesLists all Cloud Run services in a given project. Input schema { "type": "object", "properties": { "project": { "type": "string", "description": "Google Cloud project ID" } }, "required": [ "project" ], "additionalProperties": false, "$schema": "http://json-schema.org/draft-07/schema#" }	—	—

Tool

Category

Risk

create_projectCreates a new GCP project and attempts to attach it to the first available billing account. A project ID can be optionally specified; otherwise it will be automatically generated.

Input schema

{
  "type": "object",
  "properties": {
    "projectId": {
      "type": "string",
      "description": "Optional. The desired ID for the new GCP project. If not provided, an ID will be auto-generated."
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

deploy_container_imageDeploys a container image to Cloud Run. Use this tool if the user provides a container image URL.

Input schema

{
  "type": "object",
  "properties": {
    "project": {
      "type": "string",
      "description": "Google Cloud project ID. Do not select it yourself, make sure the user provides or confirms the project ID."
    },
    "region": {
      "type": "string",
      "default": "europe-west1",
      "description": "Region to deploy the service to"
    },
    "service": {
      "type": "string",
      "description": "Name of the Cloud Run service to deploy to"
    },
    "imageUrl": {
      "type": "string",
      "description": "The URL of the container image to deploy (e.g. \"gcr.io/cloudrun/hello\")"
    }
  },
  "required": [
    "project",
    "imageUrl"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

deploy_file_contentsDeploy files to Cloud Run by providing their contents directly. Takes an array of file objects containing filename and content. Use this tool if the files only exist in the current chat context.

Input schema

{
  "type": "object",
  "properties": {
    "project": {
      "type": "string",
      "description": "Google Cloud project ID. Leave unset for the app to be deployed in a new project. If provided, make sure the user confirms the project ID they want to deploy to."
    },
    "region": {
      "type": "string",
      "default": "europe-west1",
      "description": "Region to deploy the service to"
    },
    "service": {
      "type": "string",
      "description": "Name of the Cloud Run service to deploy to"
    },
    "files": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "filename": {
            "type": "string",
            "description": "Name and path of the file (e.g. \"src/index.js\" or \"data/config.json\")"
          },
          "content": {
            "type": "string",
            "description": "Text content of the file"
          }
        },
        "required": [
          "filename"
        ],
        "additionalProperties": false
      },
      "description": "Array of file objects containing filename and content"
    }
  },
  "required": [
    "project",
    "files"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

deploy_local_folderDeploy a local folder to Cloud Run. Takes an absolute folder path from the local filesystem that will be deployed. Use this tool if the entire folder content needs to be deployed.

Input schema

{
  "type": "object",
  "properties": {
    "project": {
      "type": "string",
      "description": "Google Cloud project ID. Do not select it yourself, make sure the user provides or confirms the project ID."
    },
    "region": {
      "type": "string",
      "default": "europe-west1",
      "description": "Region to deploy the service to"
    },
    "service": {
      "type": "string",
      "description": "Name of the Cloud Run service to deploy to"
    },
    "folderPath": {
      "type": "string",
      "description": "Absolute path to the folder to deploy (e.g. \"/home/user/project/src\")"
    }
  },
  "required": [
    "project",
    "folderPath"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

get_serviceGets details for a specific Cloud Run service.

Input schema

{
  "type": "object",
  "properties": {
    "project": {
      "type": "string",
      "description": "Google Cloud project ID containing the service"
    },
    "region": {
      "type": "string",
      "description": "Region where the service is located",
      "default": "europe-west1"
    },
    "service": {
      "type": "string",
      "description": "Name of the Cloud Run service"
    }
  },
  "required": [
    "project",
    "service"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

get_service_logGets Logs and Error Messages for a specific Cloud Run service.

Input schema

{
  "type": "object",
  "properties": {
    "project": {
      "type": "string",
      "description": "Google Cloud project ID containing the service"
    },
    "region": {
      "type": "string",
      "description": "Region where the service is located",
      "default": "europe-west1"
    },
    "service": {
      "type": "string",
      "description": "Name of the Cloud Run service"
    }
  },
  "required": [
    "project",
    "service"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

list_projectsLists available GCP projects

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}

—

list_servicesLists all Cloud Run services in a given project.

Input schema

{
  "type": "object",
  "properties": {
    "project": {
      "type": "string",
      "description": "Google Cloud project ID"
    }
  },
  "required": [
    "project"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

—

Resources 0

None observed for this version.

Resource templates 0

None observed for this version.

Prompts 2

deploy

Deploys the current working directory to Cloud Run.

Metadata

{
  "prompt_key": "deploy",
  "name": "deploy",
  "description": "Deploys the current working directory to Cloud Run.",
  "arguments": [
    {
      "name": "name",
      "description": "Name of the Cloud Run service to deploy to.  Defaults to the name of the current directory",
      "required": false
    },
    {
      "name": "project",
      "description": "Google Cloud project ID",
      "required": false
    },
    {
      "name": "region",
      "description": "Region where the services are located",
      "required": false
    }
  ],
  "metadata_hash": "ba9f33e560175a659a3c5ad49af5a9a7dee186fff6a2d4f43c3d1ec468781156"
}

logs

Gets the logs for a Cloud Run service.

Metadata

{
  "prompt_key": "logs",
  "name": "logs",
  "description": "Gets the logs for a Cloud Run service.",
  "arguments": [
    {
      "name": "service",
      "description": "Name of the Cloud Run service. Defaults to the name of the current directory.",
      "required": false
    },
    {
      "name": "project",
      "description": "Google Cloud project ID",
      "required": false
    },
    {
      "name": "region",
      "description": "Region where the services are located",
      "required": false
    }
  ],
  "metadata_hash": "78a873513840801d08a2599ca995ec8e49574d5891bfc28322ef666d37de883a"
}

Changes from previous version

Risk	Change	Subject
No material changes recorded.

Risk

Change

Subject

No material changes recorded.

Confirmed vulnerabilities

Severity	Finding	Advisory
No confirmed vulnerability is published for this version.

Severity

Finding

Advisory

No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: eb189a42f04949c49c379379873740be85d94d06a5e2190e31ef2691968a2048

Cloud Run MCP Server `1.10.0`

Independent inventory

Resources 0

Resource templates 0

Prompts 2

Changes from previous version

Confirmed vulnerabilities

Provenance

Let’s talk about MCP security.