Skip to main content

​
Google Cloud Platform

How to provision a GCP service account JSON and connect it to Nora.
The GCP integration covers any service the gcloud SDKs support — Compute Engine, Cloud Storage, BigQuery, Pub/Sub, Cloud Run, etc. Nora authenticates with a service-account JSON that the agent runtime mounts and points GOOGLE_APPLICATION_CREDENTIALS at.

​
Where to apply for credentials

GCP — Service Accounts

https://console.cloud.google.com/iam-admin/serviceaccounts
1

Create a service account

GCP Console → IAM & Admin → Service Accounts → Create Service Account. Give it a descriptive name. Skip the optional roles assignment — you’ll do it next.
2

Grant least-privilege roles

On the created SA’s IAM page, attach the roles your agent needs (e.g. roles/storage.objectViewer, roles/bigquery.user). Avoid roles/owner and roles/editor for production agents.
3

Generate a JSON key

Open the SA → Keys → Add Key → Create new key → JSON. The file downloads — treat it as secret.

​
Connect in Nora

1

Paste the JSON

Open the downloaded file in a text editor and paste the entire contents into the Service Account JSON textarea.
2

Set the project ID

Required field. Visible at the top of the GCP Console (or inside the JSON file as project_id).
3

Connect

Click Connect. Nora validates that the JSON parses and contains client_email, private_key, and project_id.

​
MCP server

No first-party GCP MCP server today. AWS has awslabs/mcp — a Google equivalent hasn’t shipped.

​
Environment variables Nora injects

VariableSource
GOOGLE_APPLICATION_CREDENTIALS_JSONService Account JSON
GCP_PROJECT_IDProject ID field
The agent runtime writes GOOGLE_APPLICATION_CREDENTIALS_JSON to a file at startup and points GOOGLE_APPLICATION_CREDENTIALS at the file path — that’s what every gcloud SDK expects.