// SCAN REPORT

BigQuery MCP Server

32 tools. 1 can modify or destroy data without limits.

1 write tool that can modify data. Rate limits recommended.

Last updated: 11 Jun 2026

1 can modify or destroy data

31 read-only

32 tools total

Community server · catalogue entry verified 11/06/2026

How to control BigQuery MCP Server ↓

TOOL MAP

Read (31) Write / Execute (1) Destructive / Financial (0)

MOST DANGEROUS TOOLS

High Risk

Execute · Medium gsc_forecast This tool trains a BigQuery ML model (ARIMA_PLUS) on historical data and executes forecasting computations.

1 of BigQuery MCP Server's 32 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL BIGQUERY MCP SERVER

PolicyLayer is an MCP gateway — it sits between your AI agents and BigQuery MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "gsc_traffic_drops": {
    "limits": [
      {
        "counter": "gsc_traffic_drops_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register BigQuery MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON BIGQUERY →

Free to start. No card required.

ALL 32 BIGQUERY MCP SERVER TOOLS

EXECUTE 1 tools

Execute gsc_forecast Forecast organic traffic using BigQuery ML ARIMA_PLUS. Trains a time-series model on your historical click dat

READ 31 tools

Read gsc_traffic_drops Find pages that lost the most traffic recently. Compares current period vs prior period and diagnoses whether Read ga4_gsc_branded_performance Compare branded vs non-branded organic traffic with engagement and conversion overlay from GA4. Shows how each Read ga4_gsc_page_performance Landing pages with BOTH search performance (clicks, impressions, position from GSC) AND engagement data (sessi Read gsc_intent_breakdown Classify all your ranking queries by search intent (informational, transactional, commercial, navigational) us Read gsc_new_keywords Discover queries that appeared in your recent data but were not present in the baseline period. Useful for spo Read describe_table Get detailed schema information for a specific BigQuery table including column names, types, descriptions, row Read ga4_gsc_content_roi Find pages that rank well but don Read ga4_gsc_position_value What is each ranking position worth in revenue and conversions for YOUR site? Shows conversion rate and revenu Read ga4_gsc_query_revenue Which search queries actually drive revenue and conversions? Uses proportional attribution: if a page gets cli Read ga4_gsc_snippet_mismatch Find pages where SERP snippet performance doesn Read gsc_alerts Check for SEO alerts: position drops, CTR collapses, click losses, and pages that disappeared from search resu Read gsc_anomalies Detect traffic anomalies using BigQuery ML. Unlike threshold-based alerts, this understands seasonality and we Read gsc_anonymous_traffic Analyse anonymous (hidden) query traffic that the GSC API cannot show. Reveals what percentage of your clicks Read gsc_cannibalisation Find keywords where multiple pages from your site compete against each other. Shows which pages rank for the s Read gsc_content_decay Find pages with consistent traffic decline over three consecutive months from GSC bulk export data. One bad mo Read gsc_ctr_benchmark Compare your actual CTR per page against industry benchmarks by position. Flags pages significantly underperfo Read gsc_ctr_opportunities Find pages with high impressions but CTR significantly below the expected benchmark for their ranking position Read gsc_device_split Find queries where mobile and desktop rank different pages from your site. This device cannibalisation is invi Read gsc_quick_wins Find keywords from GSC bulk export data at positions 4 to 15 with high impressions. These are striking distanc Read gsc_report Generate a comprehensive markdown performance report. Covers site snapshot, alerts, quick wins, traffic drops, Read gsc_seasonal Year-over-year seasonal traffic analysis. Shows monthly clicks, impressions, CTR, and position with YoY compar Read gsc_site_snapshot Get a quick overview of how the site is performing. Returns total clicks, impressions, CTR, position, unique p Read gsc_topic_cluster See how a group of pages performs as a whole. Aggregates clicks, impressions, CTR, and position for all pages Read list_datasets List all datasets in the BigQuery project. Use this first to discover what data is available. Read list_tables List all tables in a BigQuery dataset with their schemas. Uses INFORMATION_SCHEMA for efficiency. Use this to Read query Run a SQL query against BigQuery and return results. Only SELECT queries are allowed. A LIMIT clause is automa Read query_cost_estimate Dry-run a SQL query to see how many bytes it would scan without actually executing it. Use this before running Read sample_rows Preview sample rows from a table without writing SQL. Useful for quickly understanding what data looks like. L Read gsc_content_gaps Find topics you should create content for. Returns queries where you get impressions but rank beyond position Read gsc_content_recommendations Get actionable content recommendations by cross-referencing quick wins, content gaps, and cannibalisation data Read gsc_ngrams Extract the most common meaningful terms across your entire query set, ranked by clicks. A lightweight alterna

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Is the BigQuery MCP Server MCP server safe to use without restrictions? +

The BigQuery MCP Server server is primarily read-only with 31 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the BigQuery MCP Server MCP server expose? +

32 tools across 4 categories: Destructive, Execute, Read, Write. 31 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on BigQuery MCP Server? +

Register the BigQuery MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every BigQuery MCP Server tool call.

Deterministic rules across all 32 BigQuery MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON BIGQUERY →

Free to start. No card required.

32 BigQuery MCP Server tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

BigQuery MCP Server

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL BIGQUERY MCP SERVER

// ALL 32 BIGQUERY MCP SERVER TOOLS

// RELATED SERVERS

// FAQ