Data & AI · wired today
Drive Google BigQuery with governed agents
Models and datasets are infrastructure now, and agents need eyes on them. The Google BigQuery connector is one of 205 executable connectors and gives agents 3 read-only tools, with the credential held in the vault and every call receipted.
What agents can run against Google BigQuery
| Tool | What it does |
|---|---|
list_datasets | List the BigQuery datasets in a GCP project (dataset id, friendly name, location, labels) |
list_tables | List the tables and views in one BigQuery dataset (table id, type, creation and expiration times) |
get_table | Get one BigQuery table's metadata and column schema: row count, byte size, partitioning and field types |
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the Google BigQuery connector needs
You provide service account json from your Google BigQuery account; Quox sends it as a Google service account. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: Google BigQuery's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
This connector was blind shape-proven against the real Google BigQuery API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.
Google BigQuery integration FAQ
What can Quox agents do with Google BigQuery?
Agents can run 3 read-only tools against Google BigQuery: list datasets, list tables, get table. Every call is receipted in the evidence trail.
What does the Google BigQuery integration need?
You provide service account json from your Google BigQuery account; Quox sends it as a Google service account. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my Google BigQuery credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the Google BigQuery connector?
This connector was blind shape-proven against the real Google BigQuery API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.