feat(bigquery): Make credentials scope configurable by shobsi · Pull Request #2210 · googleapis/mcp-toolbox

shobsi · 2025-12-19T10:25:38Z

Description

This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case.

The custom scopes can be configured in the tools.yaml file, e.g.:

sources:
  bigquery-source:
    kind: "bigquery"
    project: ${BIGQUERY_PROJECT}
    location: ${BIGQUERY_LOCATION:}
    useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false}
    scopes:
      - "https://www.googleapis.com/auth/bigquery"
      - "https://www.googleapis.com/auth/drive"

and if the bigquery prebuilt config is being used, then it can be set in the environment variable as well:

$ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive"

PR Checklist

Thank you for opening a Pull Request! Before submitting your PR, there are a
few things you can do to make sure it goes smoothly:

Make sure you reviewed
CONTRIBUTING.md
Make sure to open an issue as a
bug/issue
before writing your code! That way we can discuss the change, evaluate
designs, and agree on the general idea
Ensure the tests and linter pass
Code coverage does not decrease (if any source code was changed)
Appropriate docs were updated (if necessary)
Make sure to add ! if this involve a breaking change

🛠️ Fixes #1942

This change addres the ask in #1942 where the user may want to use custom scopes. For instance, the default bigquery scope falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case.

gemini-code-assist · 2025-12-19T10:25:58Z

Summary of Changes

Hello @shobsi, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly enhances the flexibility of BigQuery integrations by introducing configurable OAuth scopes. Previously, BigQuery connections were limited to a default scope, which restricted its ability to interact with other Google Cloud services. With this update, users can now specify a list of custom scopes in their configuration, enabling broader and more tailored authorization for complex workflows involving services like Drive, Vertex AI, and Cloud Run. This change addresses a critical need for more versatile data operations and service interconnections.

Highlights

Configurable Scopes for BigQuery: Introduced a new scopes configuration option for BigQuery, allowing users to specify custom OAuth scopes beyond the default bigquery scope.
Enhanced Integration Capabilities: This change enables BigQuery to integrate seamlessly with other Google products like Drive, Vertex AI, and Cloud Run, which often require broader or specific authorization scopes not covered by the default.
Codebase Adaptation for Scope Handling: Modified BigQuery and Dataplex connection initialization logic to accept and utilize a list of custom scopes ([]string) instead of a single scope, providing greater flexibility.
YAML Configuration Update: The bigquery.yaml configuration file now supports a scopes field, making it straightforward to define required scopes directly in the configuration.
New Test Coverage: Added a new test case to validate the correct parsing and application of multiple custom scopes from YAML configurations.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request introduces a valuable feature by allowing users to configure custom scopes for BigQuery credentials. This is particularly useful for integrations with other Google products. The implementation is well-structured, touching the configuration, source initialization, and related tool code. I've included a couple of suggestions to refactor the logic for setting default scopes, aiming to improve code clarity and reduce duplication. Overall, this is a solid contribution.

github-actions · 2025-12-19T10:55:33Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

e.g. `export BIGQUERY_SCOPES="https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/bigquery"`

github-actions · 2025-12-24T07:43:44Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

github-actions · 2025-12-30T01:45:40Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

github-actions · 2026-01-04T04:31:40Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

github-actions · 2026-01-04T08:15:08Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

github-actions · 2026-01-05T23:27:53Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

github-actions · 2026-01-06T20:35:50Z

🔎 Preview at https://googleapis.github.io/genai-toolbox/previews/PR-2210/

…is#2210) ## Description This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case. The custom scopes can be configured in the tools.yaml file, e.g.: ```yaml sources: bigquery-source: kind: "bigquery" project: ${BIGQUERY_PROJECT} location: ${BIGQUERY_LOCATION:} useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false} scopes: - "https://www.googleapis.com/auth/bigquery" - "https://www.googleapis.com/auth/drive" ``` and if the [bigquery prebuilt config](https://github.com/googleapis/genai-toolbox/blob/main/internal/prebuiltconfigs/tools/bigquery.yaml) is being used, then it can be set in the environment variable as well: ```shell $ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive" ``` ## PR Checklist > Thank you for opening a Pull Request! Before submitting your PR, there are a > few things you can do to make sure it goes smoothly: - [ ] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [x] Appropriate docs were updated (if necessary) - [ ] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#1942 a450600

## Description This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case. The custom scopes can be configured in the tools.yaml file, e.g.: ```yaml sources: bigquery-source: kind: "bigquery" project: ${BIGQUERY_PROJECT} location: ${BIGQUERY_LOCATION:} useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false} scopes: - "https://www.googleapis.com/auth/bigquery" - "https://www.googleapis.com/auth/drive" ``` and if the [bigquery prebuilt config](https://github.com/googleapis/genai-toolbox/blob/main/internal/prebuiltconfigs/tools/bigquery.yaml) is being used, then it can be set in the environment variable as well: ```shell $ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive" ``` ## PR Checklist > Thank you for opening a Pull Request! Before submitting your PR, there are a > few things you can do to make sure it goes smoothly: - [ ] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [x] Appropriate docs were updated (if necessary) - [ ] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#1942

🤖 I have created a release *beep* *boop* --- ## [0.25.0](v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([#2121](#2121)) ([9c62f31](9c62f31)) * Add `allowed-hosts` flag ([#2254](#2254)) ([17b41f6](17b41f6)) * Add parameter default value to manifest ([#2264](#2264)) ([9d1feca](9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([#858](#858)) ([b706b5b](b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([#2202](#2202)) ([731a32e](731a32e)) * **sources/bigquery:** Make credentials scope configurable ([#2210](#2210)) ([a450600](a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([#2155](#2155)) ([4a4cf1e](4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([#2245](#2245)) ([eb79339](eb79339)) * **tools/postgressql:** Add tool to list store procedure ([#2156](#2156)) ([cf0fc51](cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([#2151](#2151)) ([17b70cc](17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([#2281](#2281)) ([a779975](a779975)) * **sources/cloudgda:** Add import for cloudgda source ([#2217](#2217)) ([7daa411](7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([#2228](#2228)) ([7053fbb](7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([#2265](#2265)) ([ef8f3b0](ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([#2231](#2231)) ([268700b](268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [0.25.0](v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([#2121](#2121)) ([9c62f31](9c62f31)) * Add `allowed-hosts` flag ([#2254](#2254)) ([17b41f6](17b41f6)) * Add parameter default value to manifest ([#2264](#2264)) ([9d1feca](9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([#858](#858)) ([b706b5b](b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([#2202](#2202)) ([731a32e](731a32e)) * **sources/bigquery:** Make credentials scope configurable ([#2210](#2210)) ([a450600](a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([#2155](#2155)) ([4a4cf1e](4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([#2245](#2245)) ([eb79339](eb79339)) * **tools/postgressql:** Add tool to list store procedure ([#2156](#2156)) ([cf0fc51](cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([#2151](#2151)) ([17b70cc](17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([#2281](#2281)) ([a779975](a779975)) * **sources/cloudgda:** Add import for cloudgda source ([#2217](#2217)) ([7daa411](7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([#2228](#2228)) ([7053fbb](7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([#2265](#2265)) ([ef8f3b0](ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([#2231](#2231)) ([268700b](268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 41b518b

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([googleapis#2121](googleapis#2121)) ([9c62f31](googleapis@9c62f31)) * Add `allowed-hosts` flag ([googleapis#2254](googleapis#2254)) ([17b41f6](googleapis@17b41f6)) * Add parameter default value to manifest ([googleapis#2264](googleapis#2264)) ([9d1feca](googleapis@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([googleapis#858](googleapis#858)) ([b706b5b](googleapis@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([googleapis#2202](googleapis#2202)) ([731a32e](googleapis@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([googleapis#2210](googleapis#2210)) ([a450600](googleapis@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([googleapis#2155](googleapis#2155)) ([4a4cf1e](googleapis@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([googleapis#2245](googleapis#2245)) ([eb79339](googleapis@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([googleapis#2156](googleapis#2156)) ([cf0fc51](googleapis@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([googleapis#2151](googleapis#2151)) ([17b70cc](googleapis@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([googleapis#2281](googleapis#2281)) ([a779975](googleapis@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([googleapis#2217](googleapis#2217)) ([7daa411](googleapis@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([googleapis#2228](googleapis#2228)) ([7053fbb](googleapis@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([googleapis#2265](googleapis#2265)) ([ef8f3b0](googleapis@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([googleapis#2231](googleapis#2231)) ([268700b](googleapis@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 41b518b

…is#2210) ## Description This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case. The custom scopes can be configured in the tools.yaml file, e.g.: ```yaml sources: bigquery-source: kind: "bigquery" project: ${BIGQUERY_PROJECT} location: ${BIGQUERY_LOCATION:} useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false} scopes: - "https://www.googleapis.com/auth/bigquery" - "https://www.googleapis.com/auth/drive" ``` and if the [bigquery prebuilt config](https://github.com/googleapis/genai-toolbox/blob/main/internal/prebuiltconfigs/tools/bigquery.yaml) is being used, then it can be set in the environment variable as well: ```shell $ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive" ``` ## PR Checklist > Thank you for opening a Pull Request! Before submitting your PR, there are a > few things you can do to make sure it goes smoothly: - [ ] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [x] Appropriate docs were updated (if necessary) - [ ] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#1942 a450600

🤖 I have created a release *beep* *boop* --- ## [0.25.0](v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([#2121](#2121)) ([9c62f31](9c62f31)) * Add `allowed-hosts` flag ([#2254](#2254)) ([17b41f6](17b41f6)) * Add parameter default value to manifest ([#2264](#2264)) ([9d1feca](9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([#858](#858)) ([b706b5b](b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([#2202](#2202)) ([731a32e](731a32e)) * **sources/bigquery:** Make credentials scope configurable ([#2210](#2210)) ([a450600](a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([#2155](#2155)) ([4a4cf1e](4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([#2245](#2245)) ([eb79339](eb79339)) * **tools/postgressql:** Add tool to list store procedure ([#2156](#2156)) ([cf0fc51](cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([#2151](#2151)) ([17b70cc](17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([#2281](#2281)) ([a779975](a779975)) * **sources/cloudgda:** Add import for cloudgda source ([#2217](#2217)) ([7daa411](7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([#2228](#2228)) ([7053fbb](7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([#2265](#2265)) ([ef8f3b0](ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([#2231](#2231)) ([268700b](268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([googleapis#2121](googleapis#2121)) ([9c62f31](googleapis@9c62f31)) * Add `allowed-hosts` flag ([googleapis#2254](googleapis#2254)) ([17b41f6](googleapis@17b41f6)) * Add parameter default value to manifest ([googleapis#2264](googleapis#2264)) ([9d1feca](googleapis@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([googleapis#858](googleapis#858)) ([b706b5b](googleapis@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([googleapis#2202](googleapis#2202)) ([731a32e](googleapis@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([googleapis#2210](googleapis#2210)) ([a450600](googleapis@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([googleapis#2155](googleapis#2155)) ([4a4cf1e](googleapis@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([googleapis#2245](googleapis#2245)) ([eb79339](googleapis@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([googleapis#2156](googleapis#2156)) ([cf0fc51](googleapis@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([googleapis#2151](googleapis#2151)) ([17b70cc](googleapis@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([googleapis#2281](googleapis#2281)) ([a779975](googleapis@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([googleapis#2217](googleapis#2217)) ([7daa411](googleapis@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([googleapis#2228](googleapis#2228)) ([7053fbb](googleapis@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([googleapis#2265](googleapis#2265)) ([ef8f3b0](googleapis@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([googleapis#2231](googleapis#2231)) ([268700b](googleapis@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 41b518b

This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case. The custom scopes can be configured in the tools.yaml file, e.g.: ```yaml sources: bigquery-source: kind: "bigquery" project: ${BIGQUERY_PROJECT} location: ${BIGQUERY_LOCATION:} useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false} scopes: - "https://www.googleapis.com/auth/bigquery" - "https://www.googleapis.com/auth/drive" ``` and if the [bigquery prebuilt config](https://github.com/googleapis/genai-toolbox/blob/main/internal/prebuiltconfigs/tools/bigquery.yaml) is being used, then it can be set in the environment variable as well: ```shell $ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive" ``` > Thank you for opening a Pull Request! Before submitting your PR, there are a > few things you can do to make sure it goes smoothly: - [ ] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [x] Appropriate docs were updated (if necessary) - [ ] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#1942

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([googleapis#2121](googleapis#2121)) ([9c62f31](googleapis@9c62f31)) * Add `allowed-hosts` flag ([googleapis#2254](googleapis#2254)) ([17b41f6](googleapis@17b41f6)) * Add parameter default value to manifest ([googleapis#2264](googleapis#2264)) ([9d1feca](googleapis@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([googleapis#858](googleapis#858)) ([b706b5b](googleapis@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([googleapis#2202](googleapis#2202)) ([731a32e](googleapis@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([googleapis#2210](googleapis#2210)) ([a450600](googleapis@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([googleapis#2155](googleapis#2155)) ([4a4cf1e](googleapis@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([googleapis#2245](googleapis#2245)) ([eb79339](googleapis@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([googleapis#2156](googleapis#2156)) ([cf0fc51](googleapis@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([googleapis#2151](googleapis#2151)) ([17b70cc](googleapis@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([googleapis#2281](googleapis#2281)) ([a779975](googleapis@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([googleapis#2217](googleapis#2217)) ([7daa411](googleapis@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([googleapis#2228](googleapis#2228)) ([7053fbb](googleapis@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([googleapis#2265](googleapis#2265)) ([ef8f3b0](googleapis@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([googleapis#2231](googleapis#2231)) ([268700b](googleapis@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case. The custom scopes can be configured in the tools.yaml file, e.g.: ```yaml sources: bigquery-source: kind: "bigquery" project: ${BIGQUERY_PROJECT} location: ${BIGQUERY_LOCATION:} useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false} scopes: - "https://www.googleapis.com/auth/bigquery" - "https://www.googleapis.com/auth/drive" ``` and if the [bigquery prebuilt config](https://github.com/googleapis/genai-toolbox/blob/main/internal/prebuiltconfigs/tools/bigquery.yaml) is being used, then it can be set in the environment variable as well: ```shell $ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive" ``` > Thank you for opening a Pull Request! Before submitting your PR, there are a > few things you can do to make sure it goes smoothly: - [ ] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [x] Appropriate docs were updated (if necessary) - [ ] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#1942

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([googleapis#2121](googleapis#2121)) ([9c62f31](googleapis@9c62f31)) * Add `allowed-hosts` flag ([googleapis#2254](googleapis#2254)) ([17b41f6](googleapis@17b41f6)) * Add parameter default value to manifest ([googleapis#2264](googleapis#2264)) ([9d1feca](googleapis@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([googleapis#858](googleapis#858)) ([b706b5b](googleapis@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([googleapis#2202](googleapis#2202)) ([731a32e](googleapis@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([googleapis#2210](googleapis#2210)) ([a450600](googleapis@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([googleapis#2155](googleapis#2155)) ([4a4cf1e](googleapis@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([googleapis#2245](googleapis#2245)) ([eb79339](googleapis@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([googleapis#2156](googleapis#2156)) ([cf0fc51](googleapis@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([googleapis#2151](googleapis#2151)) ([17b70cc](googleapis@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([googleapis#2281](googleapis#2281)) ([a779975](googleapis@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([googleapis#2217](googleapis#2217)) ([7daa411](googleapis@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([googleapis#2228](googleapis#2228)) ([7053fbb](googleapis@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([googleapis#2265](googleapis#2265)) ([ef8f3b0](googleapis@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([googleapis#2231](googleapis#2231)) ([268700b](googleapis@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([googleapis#2121](googleapis#2121)) ([9c62f31](googleapis@9c62f31)) * Add `allowed-hosts` flag ([googleapis#2254](googleapis#2254)) ([17b41f6](googleapis@17b41f6)) * Add parameter default value to manifest ([googleapis#2264](googleapis#2264)) ([9d1feca](googleapis@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([googleapis#858](googleapis#858)) ([b706b5b](googleapis@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([googleapis#2202](googleapis#2202)) ([731a32e](googleapis@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([googleapis#2210](googleapis#2210)) ([a450600](googleapis@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([googleapis#2155](googleapis#2155)) ([4a4cf1e](googleapis@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([googleapis#2245](googleapis#2245)) ([eb79339](googleapis@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([googleapis#2156](googleapis#2156)) ([cf0fc51](googleapis@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([googleapis#2151](googleapis#2151)) ([17b70cc](googleapis@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([googleapis#2281](googleapis#2281)) ([a779975](googleapis@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([googleapis#2217](googleapis#2217)) ([7daa411](googleapis@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([googleapis#2228](googleapis#2228)) ([7053fbb](googleapis@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([googleapis#2265](googleapis#2265)) ([ef8f3b0](googleapis@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([googleapis#2231](googleapis#2231)) ([268700b](googleapis@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com> 41b518b

## Description This change addresses the ask where the user may want to use custom scopes. For instance, the default scope (bigquery) falls short from running sql that utilizes integration with other google products, such as Drive, Vertex AI, Cloud Run etc. With this change the user would be able to configure custom scopes depending on their use case. The custom scopes can be configured in the tools.yaml file, e.g.: ```yaml sources: bigquery-source: kind: "bigquery" project: ${BIGQUERY_PROJECT} location: ${BIGQUERY_LOCATION:} useClientOAuth: ${BIGQUERY_USE_CLIENT_OAUTH:false} scopes: - "https://www.googleapis.com/auth/bigquery" - "https://www.googleapis.com/auth/drive" ``` and if the [bigquery prebuilt config](https://github.com/googleapis/genai-toolbox/blob/main/internal/prebuiltconfigs/tools/bigquery.yaml) is being used, then it can be set in the environment variable as well: ```shell $ export BIGQUERY_SCOPES="https://www.googleapis.com/auth/bigquery,https://www.googleapis.com/auth/drive" ``` ## PR Checklist > Thank you for opening a Pull Request! Before submitting your PR, there are a > few things you can do to make sure it goes smoothly: - [ ] Make sure you reviewed [CONTRIBUTING.md](https://github.com/googleapis/genai-toolbox/blob/main/CONTRIBUTING.md) - [x] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/genai-toolbox/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [x] Ensure the tests and linter pass - [x] Code coverage does not decrease (if any source code was changed) - [x] Appropriate docs were updated (if necessary) - [ ] Make sure to add `!` if this involve a breaking change 🛠️ Fixes googleapis#1942

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([googleapis#2121](googleapis#2121)) ([9c62f31](googleapis@9c62f31)) * Add `allowed-hosts` flag ([googleapis#2254](googleapis#2254)) ([17b41f6](googleapis@17b41f6)) * Add parameter default value to manifest ([googleapis#2264](googleapis#2264)) ([9d1feca](googleapis@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([googleapis#858](googleapis#858)) ([b706b5b](googleapis@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([googleapis#2202](googleapis#2202)) ([731a32e](googleapis@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([googleapis#2210](googleapis#2210)) ([a450600](googleapis@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([googleapis#2155](googleapis#2155)) ([4a4cf1e](googleapis@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([googleapis#2245](googleapis#2245)) ([eb79339](googleapis@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([googleapis#2156](googleapis#2156)) ([cf0fc51](googleapis@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([googleapis#2151](googleapis#2151)) ([17b70cc](googleapis@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([googleapis#2281](googleapis#2281)) ([a779975](googleapis@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([googleapis#2217](googleapis#2217)) ([7daa411](googleapis@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([googleapis#2228](googleapis#2228)) ([7053fbb](googleapis@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([googleapis#2265](googleapis#2265)) ([ef8f3b0](googleapis@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([googleapis#2231](googleapis#2231)) ([268700b](googleapis@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [0.25.0](googleapis/mcp-toolbox@v0.24.0...v0.25.0) (2026-01-08) ### Features * Add `embeddingModel` support ([#2121](googleapis/mcp-toolbox#2121)) ([9c62f31](googleapis/mcp-toolbox@9c62f31)) * Add `allowed-hosts` flag ([#2254](googleapis/mcp-toolbox#2254)) ([17b41f6](googleapis/mcp-toolbox@17b41f6)) * Add parameter default value to manifest ([#2264](googleapis/mcp-toolbox#2264)) ([9d1feca](googleapis/mcp-toolbox@9d1feca)) * **snowflake:** Add Snowflake Source and Tools ([#858](googleapis/mcp-toolbox#858)) ([b706b5b](googleapis/mcp-toolbox@b706b5b)) * **prebuilt/cloud-sql-mysql:** Update CSQL MySQL prebuilt tools to use IAM ([#2202](googleapis/mcp-toolbox#2202)) ([731a32e](googleapis/mcp-toolbox@731a32e)) * **sources/bigquery:** Make credentials scope configurable ([#2210](googleapis/mcp-toolbox#2210)) ([a450600](googleapis/mcp-toolbox@a450600)) * **sources/trino:** Add ssl verification options and fix docs example ([#2155](googleapis/mcp-toolbox#2155)) ([4a4cf1e](googleapis/mcp-toolbox@4a4cf1e)) * **tools/looker:** Add ability to set destination folder with `make_look` and `make_dashboard`. ([#2245](googleapis/mcp-toolbox#2245)) ([eb79339](googleapis/mcp-toolbox@eb79339)) * **tools/postgressql:** Add tool to list store procedure ([#2156](googleapis/mcp-toolbox#2156)) ([cf0fc51](googleapis/mcp-toolbox@cf0fc51)) * **tools/postgressql:** Add Parameter `embeddedBy` config support ([#2151](googleapis/mcp-toolbox#2151)) ([17b70cc](googleapis/mcp-toolbox@17b70cc)) ### Bug Fixes * **server:** Add `embeddingModel` config initialization ([#2281](googleapis/mcp-toolbox#2281)) ([a779975](googleapis/mcp-toolbox@a779975)) * **sources/cloudgda:** Add import for cloudgda source ([#2217](googleapis/mcp-toolbox#2217)) ([7daa411](googleapis/mcp-toolbox@7daa411)) * **tools/alloydb-wait-for-operation:** Fix connection message generation ([#2228](googleapis/mcp-toolbox#2228)) ([7053fbb](googleapis/mcp-toolbox@7053fbb)) * **tools/alloydbainl:** Only add psv when NL Config Param is defined ([#2265](googleapis/mcp-toolbox#2265)) ([ef8f3b0](googleapis/mcp-toolbox@ef8f3b0)) * **tools/looker:** Looker client OAuth nil pointer error ([#2231](googleapis/mcp-toolbox#2231)) ([268700b](googleapis/mcp-toolbox@268700b)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). --------- Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com> Co-authored-by: Yuan Teoh <45984206+Yuan325@users.noreply.github.com>

shobsi requested review from a team December 19, 2025 10:25

blunderbuss-gcf Bot assigned Yuan325 Dec 19, 2025

gemini-code-assist Bot reviewed Dec 19, 2025

View reviewed changes

Comment thread internal/sources/bigquery/bigquery.go

Comment thread internal/sources/bigquery/bigquery.go Outdated

shobsi added 2 commits December 19, 2025 10:35

reword the change for concise-ness

62f6705

update documentation

f281935

shobsi mentioned this pull request Dec 21, 2025

Adding drive.readonly scope in BigQuery ADC initialization for external Google Sheets #1942

Closed

1 task

shobsi added 3 commits December 24, 2025 01:33

handle the list of scopes provided via environment variable

a290a2f

e.g. `export BIGQUERY_SCOPES="https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/bigquery"`

Merge remote-tracking branch 'origin/main' into shobsi-config-scopes

ebd64eb

collate conversational analytics scope with BQ source

0ee2689

Merge branch 'main' into shobsi-config-scopes

fc07796

shobsi requested a review from duwenxin99 January 2, 2026 22:44

duwenxin99 requested changes Jan 3, 2026

View reviewed changes

Comment thread docs/BIGQUERY_README.md

Comment thread internal/sources/bigquery/bigquery.go

shobsi added 2 commits January 4, 2026 04:18

Merge remote-tracking branch 'origin/main' into shobsi-config-scopes

0b8df86

add new config option in bigquery.md documentation

398dc89

shobsi requested a review from duwenxin99 January 4, 2026 08:09

correct example scope for drive readonly

ebc13e2

Merge remote-tracking branch 'origin/main' into shobsi-config-scopes

8d0f921

duwenxin99 approved these changes Jan 6, 2026

View reviewed changes

Comment thread internal/sources/bigquery/bigquery.go Outdated

shobsi added 2 commits January 6, 2026 20:29

Merge remote-tracking branch 'origin/main' into shobsi-config-scopes

2a3ab3b

replace interface{} with any

498fb49

BrewTestBot mentioned this pull request Jan 8, 2026

mcp-toolbox 0.25.0 Homebrew/homebrew-core#261919

Merged

github-actions Bot mentioned this pull request Feb 20, 2026

feat(tools/looker): Enable Get All Lookml Tests tool for Looker Anthrino/genai-toolbox#3

Open

6 tasks

shobsi mentioned this pull request Mar 23, 2026

feat(bigquery): add conversational analytics tools for Data Agents #2517

Merged

6 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(bigquery): Make credentials scope configurable#2210

feat(bigquery): Make credentials scope configurable#2210
shobsi merged 14 commits into
mainfrom
shobsi-config-scopes

shobsi commented Dec 19, 2025 •

edited

Loading

Uh oh!

gemini-code-assist Bot commented Dec 19, 2025

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Dec 19, 2025

Uh oh!

github-actions Bot commented Dec 24, 2025

Uh oh!

github-actions Bot commented Dec 30, 2025

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Jan 4, 2026

Uh oh!

github-actions Bot commented Jan 4, 2026

Uh oh!

github-actions Bot commented Jan 5, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jan 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

shobsi commented Dec 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

PR Checklist

Uh oh!

gemini-code-assist Bot commented Dec 19, 2025

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Dec 19, 2025

Uh oh!

github-actions Bot commented Dec 24, 2025

Uh oh!

github-actions Bot commented Dec 30, 2025

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Jan 4, 2026

Uh oh!

github-actions Bot commented Jan 4, 2026

Uh oh!

github-actions Bot commented Jan 5, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jan 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

shobsi commented Dec 19, 2025 •

edited

Loading