The following table lists the Identity and Access Management (IAM) permissions required to run each Cloud Storage MCP server method . IAM permissions are bundled together to make roles . You grant roles to users and groups .
| Method | Required IAM Permissions |
|---|---|
create_bucket
|
mcp.tools.call
storage.buckets.create
|
get_object_metadata
|
mcp.tools.call
storage.objects.get
|
list_buckets
|
mcp.tools.call
storage.buckets.list
|
list_objects
|
mcp.tools.call
storage.objects.list
|
read_object
|
mcp.tools.call
storage.objects.get
|
read_text
|
mcp.tools.call
storage.objects.get
|
write_text
|
mcp.tools.call
storage.objects.create
|
What's next
-
For a list of roles and the permissions they contain, see IAM Roles for Cloud Storage .
-
Assign IAM roles at the project and bucket level.
