Google BigQuery for AI agents
Google BigQuery is a managed data warehouse for running fast SQL queries and machine learning over large datasets. Teams use it to query and update this data without standing up separate infrastructure. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.
What agents do in Google BigQuery.
Run a read-only SQL query
Run a SELECT query against a dataset to answer a question about recent order volume.
Check a table's schema
Look up a table's schema before writing a query that joins it with another dataset.
Approve a table delete
Delete an unused table only after an engineer confirms it is not referenced by any pipeline.
63 Google BigQuery actions, graded by risk.
Every Google BigQuery action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.
read
33Look things up. Allowed by default.
- google_bigquery.get_jobGet BigQuery Job
- google_bigquery.list_jobsList BigQuery Jobs
- google_bigquery.get_datasetGet BigQuery Dataset Metadata
- google_bigquery.get_routineGet BigQuery Routine
- google_bigquery.list_modelsList BigQuery Models
- google_bigquery.list_tablesList BigQuery Tables
- google_bigquery.list_datasetsList BigQuery Datasets
- google_bigquery.list_projectsList BigQuery Projects
- google_bigquery.list_routinesList BigQuery Routines
- google_bigquery.list_locationsList BigQuery Data Transfer Locations
- google_bigquery.list_table_dataList BigQuery Table Data
- google_bigquery.get_table_schemaGet BigQuery Table Schema
- google_bigquery.get_query_resultsGet BigQuery Query Results
- google_bigquery.list_reservationsList BigQuery Reservations
- google_bigquery.get_bigquery_modelGet BigQuery ML Model
- google_bigquery.get_service_accountGet BigQuery Service Account
write
24Create and change things. Allow, or ask the user first.
- google_bigquery.create_tableCreate BigQuery Table
- google_bigquery.update_tableUpdate BigQuery Table
- google_bigquery.create_datasetCreate BigQuery Dataset
- google_bigquery.create_listingCreate Analytics Hub Listing
- google_bigquery.create_routineCreate BigQuery Routine
- google_bigquery.update_datasetUpdate BigQuery Dataset
- google_bigquery.update_routineUpdate BigQuery Routine
- google_bigquery.create_connectionCreate BigQuery Connection
- google_bigquery.update_connectionUpdate BigQuery Connection
- google_bigquery.create_reservationCreate BigQuery Reservation
- google_bigquery.create_data_exchangeCreate Analytics Hub Data Exchange
- google_bigquery.create_query_templateCreate Analytics Hub Query Template
- google_bigquery.create_capacity_commitmentCreate Capacity Commitment
- google_bigquery.create_dataexchanges_listingsCreate Analytics Hub Listing
- google_bigquery.create_locations_datapoliciesCreate BigQuery Data Policy (v2beta1)
- google_bigquery.create_reservation_assignmentCreate BigQuery Reservation Assignment
destructive
6Delete, cancel or archive. Ask first, or deny outright.
- google_bigquery.cancel_jobCancel BigQuery Job
- google_bigquery.delete_modelDelete BigQuery ML Model
- google_bigquery.delete_tableDelete BigQuery Table
- google_bigquery.delete_datasetDelete BigQuery Dataset
- google_bigquery.delete_routineDelete BigQuery Routine
- google_bigquery.delete_job_metadataDelete BigQuery Job Metadata
Google BigQuery in three steps.
- 01Your users connect Google BigQueryThey sign in to Google BigQuery on Arc0 Connect, under your brand, and approve the access you ask for.
- 02You set the rulesReads run, writes like “create BigQuery Table” can wait for the user, and “delete BigQuery ML Model” can be denied outright.
- 03Any agent can actYour agent calls Google BigQuery through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
await arc0.policies.set('google_bigquery', { read: 'allow', write: 'ask', // create_table destructive: 'deny', // delete_model }) # Claude Code: the same connection, one URL $ claude mcp add --transport http arc0 \ https://mcp.arc0.ai/u/u_8f2
How Google BigQuery connects.
Users sign in to Google BigQuery on Arc0 Connect and approve the scopes you request. Build with Arc0’s Google BigQuery OAuth app, or bring your own so the Google BigQuery consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
The same Google BigQuery connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →
- AUTH
- OAuth 2.0 · Service account
- CREDENTIALS
- Per-tenant encrypted vault
- MODEL SEES
- Results only, never credentials
- AUDIT LOG
- Every call, on every plan
Use Google BigQuery from any agent.
More databases and spreadsheets apps.
Google BigQuery and Arc0, answered.
Can I use Google BigQuery with Claude, ChatGPT or Cursor?
Yes. Connect Google BigQuery to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Google BigQuery actions you allow.
How do users connect Google BigQuery?
Users sign in to Google BigQuery on Arc0 Connect and approve the scopes you request. Build with Arc0’s Google BigQuery OAuth app, or bring your own so the Google BigQuery consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
Which Google BigQuery actions can my agent take?
63 in total: 33 read, 24 write and 6 destructive, such as “create BigQuery Table”. Your policies decide which of them each agent may call.
Can I stop my agent from deleting things in Google BigQuery?
Yes. Actions like “delete BigQuery ML Model” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.
Can my own backend call Google BigQuery too?
Yes. The same Google BigQuery connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.
Plug Google BigQuery into your agent.
Your users connect Google BigQuery once, under your brand. Your agent gets 63 actions behind your policies, with every call on the record.
Free to build · MCP + REST · Audit log on every plan