
How to add MCP Toolbox for Databases (BigQuery) to Windsurf
Google's official MCP server with prebuilt BigQuery tools, querying datasets via Application Default Credentials. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.
Last updated June 15, 2026 · 16k★ · stdio · oauth · official
Windsurf config for MCP Toolbox for Databases (BigQuery)
brew install mcp-toolbox && toolbox --prebuilt bigquery --stdio{
"mcpServers": {
"mcp-toolbox-for-databases-bigquery": {
"command": "/absolute/path/to/toolbox",
"args": [
"--prebuilt",
"bigquery",
"--stdio"
],
"env": {
"BIGQUERY_PROJECT": "<your-gcp-project-id>"
}
}
}
}Setup steps
- 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
- 2Paste the MCP Toolbox for Databases (BigQuery) config below.
- 3Fill in placeholder secrets, then save.
- 4Click Refresh in the MCP panel.
- 5MCP Toolbox for Databases (BigQuery)'s tools become available to Cascade.
Before you start
- The toolbox binary (download from GitHub releases and `chmod +x`), or run via container/source; MCP Toolbox v0.7.0 or later for the full BigQuery toolset
- A Google Cloud project with the BigQuery API enabled
- Application Default Credentials configured locally (e.g. `gcloud auth application-default login`) or a service account key
- IAM roles on the project/dataset such as BigQuery User and BigQuery Data Viewer (read), plus Job User to run queries
- An MCP-capable client (Claude Desktop, Cursor, Gemini/ADK, etc.)
What MCP Toolbox for Databases (BigQuery) can do in Windsurf
bigquery-execute-sqlRun an arbitrary SQL statement against BigQuery and return results
bigquery-sqlRun a parameterized/templated SQL query defined as a tool
bigquery-list-dataset-idsList dataset IDs available in a project
bigquery-get-dataset-infoGet metadata for a given BigQuery dataset
bigquery-list-table-idsReturn the table IDs in a given dataset
bigquery-get-table-infoGet schema and metadata for a given table
bigquery-search-catalogFind tables using a natural-language search over the data catalog
bigquery-forecastForecast time-series data using BigQuery ML forecasting
Security
Authentication relies on your local gcloud Application Default Credentials, so the server inherits whatever BigQuery permissions that identity has; use a least-privilege account. The command path must point at the toolbox binary you installed, so verify its absolute path.
MCP Toolbox for Databases (BigQuery) + Windsurf FAQ
Where is the Windsurf config file?
Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the MCP Toolbox for Databases (BigQuery) config there under the "mcpServers" key and restart the client.
Is MCP Toolbox for Databases (BigQuery) safe to use with Windsurf?
Authentication relies on your local gcloud Application Default Credentials, so the server inherits whatever BigQuery permissions that identity has; use a least-privilege account. The command path must point at the toolbox binary you installed, so verify its absolute path.
How does authentication work?
It uses Google Application Default Credentials (ADC). Run `gcloud auth application-default login` for local dev, or attach a service account with the right BigQuery IAM roles.
Can I make it read-only?
Yes. Scope the credential's IAM to read roles (e.g. BigQuery Data Viewer / Job User) and expose only the read/metadata tools in your tools.yaml to enforce a read-only production pattern.
Is this the same as 'GenAI Toolbox'?
Yes. MCP Toolbox for Databases is the renamed GenAI Toolbox, maintained by Google under the googleapis org, and works with Google's ADK as well as standard MCP clients.