gcp-utils-set-project-id

WHAT IT DOES

What gcp-utils-set-project-id does on GCP Billing and Monitoring MCP Server

AI agents use gcp-utils-set-project-id to create or update resources in GCP Billing and Monitoring MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your GCP Billing and Monitoring MCP Server environment.

WHY IT NEEDS A POLICY

Why gcp-utils-set-project-id needs a policy

This tool changes the operational context for subsequent GCP commands by setting a project ID. While not destructive or financial in itself, it is a Write operation that modifies system state.

From the tool's definition Set the default Google Cloud project ID to use for all operations - this modifies configuration state that affects subsequent operations

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

gcp-utils-set-project-id Rate-limited

gcp-utils-set-project-id stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gcp-utils-set-project-id": {
      "limits": [
        {
          "counter": "gcp-utils-set-project-id_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches GCP Billing and Monitoring MCP Server, so you can run agents against it safely.

FAQ

Questions about gcp-utils-set-project-id

What does the gcp-utils-set-project-id tool do? +

Set the default Google Cloud project ID to use for all operations. It is categorised as a Write tool in the GCP Billing and Monitoring MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on gcp-utils-set-project-id? +

Register the GCP Billing and Monitoring MCP Server MCP server in PolicyLayer and add a rule for gcp-utils-set-project-id: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches GCP Billing and Monitoring MCP Server. Nothing to install.

What risk level is gcp-utils-set-project-id? +

gcp-utils-set-project-id is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit gcp-utils-set-project-id? +

Yes. Add a rate_limit block to the gcp-utils-set-project-id rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block gcp-utils-set-project-id completely? +

Set action: deny in the PolicyLayer policy for gcp-utils-set-project-id. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides gcp-utils-set-project-id? +

gcp-utils-set-project-id is provided by the GCP Billing and Monitoring MCP Server MCP server (radiumgu/gcp-billing-and-monitoring-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.