# Toolcape + Cloud Projects

Toolcape connects a company’s existing AI to its systems through one MCP entry point, with account connections, group and individual permissions, and audit logs. This documentation describes a product prototype; it is not evidence that a live server or account is connected.

## The connection
Cloud Projects: The organization, folders and projects that contain Google Cloud resources.
API connection · AI uses Toolcape through MCP
Provider sign-in (OAuth). Confirm whether the configured connection acts as the user or uses application permissions.

## Typical actions
- Read: Read project and organization information
- Create: Create supported cloud projects
- Change: Change project metadata or policies
These are infrastructure projects, not project plans or tasks. Ask IT to choose the correct organization and rights.

## Setup
1. IT configures the provider app, API and requested scopes.
2. Provider sign-in (OAuth). Confirm whether the configured connection acts as the user or uses application permissions.
3. Make the service available in Toolcape. Set Everyone, group and individual rules for the actions actually needed. Adding a service does not grant access.
4. Connect the approved AI client to the actual Toolcape MCP address and sign in. Start with a harmless read-only task and check the audit log.

## Permissions
For personal delegated access, the provider account, approved app scopes and Toolcape rules must all permit the action. Shared accounts and application permissions may have other limits. Toolcape combines Everyone and group grants; a personal exception replaces inherited access for that service. Reading can disclose confidential information. Sharing, sending and deletion need separate consideration.

## Calling an operation
First discover which tools the connected Toolcape server actually exposes. If it offers search → describe → execute, find the relevant operation, inspect its input schema and permissions, then call it with validated inputs. Tool names vary by server; do not invent names, arguments, URLs or successful outcomes. Without connected tools, give setup guidance instead of claiming to perform actions.

## Operation reference
Catalog snapshot: 16 September 2026. Verify the current schema before calling.
- cloudresourcemanagerLiensGet — Get Liens
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerLiensDelete — Delete Liens
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerLiensList — List Liens
  GET https://cloudresourcemanager.googleapis.com/v3/liens
  https://cloud.google.com/resource-manager
- cloudresourcemanagerLiensCreate — Create Liens
  POST https://cloudresourcemanager.googleapis.com/v3/liens
  https://cloud.google.com/resource-manager
- cloudresourcemanagerLocationsTagBindingCollectionsGet — Get Locations Tag Binding Collections
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerLocationsTagBindingCollectionsPatch — Patch Locations Tag Binding Collections
  PATCH https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerLocationsEffectiveTagBindingCollectionsGet — Get Locations Effective Tag Binding Collections
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagBindingsList — List Tag Bindings
  GET https://cloudresourcemanager.googleapis.com/v3/tagBindings
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagBindingsCreate — Create Tag Bindings
  POST https://cloudresourcemanager.googleapis.com/v3/tagBindings
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagBindingsDelete — Delete Tag Bindings
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerEffectiveTagsList — List Effective Tags
  GET https://cloudresourcemanager.googleapis.com/v3/effectiveTags
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersTestIamPermissions — Folders Test Iam Permissions
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:testIamPermissions
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersGet — Get Folders
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersDelete — Delete Folders
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersPatch — Patch Folders
  PATCH https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersSearch — Search Folders
  GET https://cloudresourcemanager.googleapis.com/v3/folders:search
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersList — List Folders
  GET https://cloudresourcemanager.googleapis.com/v3/folders
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersCreate — Create Folders
  POST https://cloudresourcemanager.googleapis.com/v3/folders
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersUndelete — Folders Undelete
  POST https://cloudresourcemanager.googleapis.com/v3/{+name}:undelete
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersGetIamPolicy — Get Folders Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:getIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersMove — Move Folders
  POST https://cloudresourcemanager.googleapis.com/v3/{+name}:move
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersSetIamPolicy — Set Folders Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:setIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersCapabilitiesGet — Get Folders Capabilities
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFoldersCapabilitiesPatch — Patch Folders Capabilities
  PATCH https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerOrganizationsGet — Get Organizations
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerOrganizationsSearch — Search Organizations
  GET https://cloudresourcemanager.googleapis.com/v3/organizations:search
  https://cloud.google.com/resource-manager
- cloudresourcemanagerOrganizationsTestIamPermissions — Organizations Test Iam Permissions
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:testIamPermissions
  https://cloud.google.com/resource-manager
- cloudresourcemanagerOrganizationsSetIamPolicy — Set Organizations Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:setIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerOrganizationsGetIamPolicy — Get Organizations Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:getIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesGetIamPolicy — Get Tag Values Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:getIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesList — List Tag Values
  GET https://cloudresourcemanager.googleapis.com/v3/tagValues
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesCreate — Create Tag Values
  POST https://cloudresourcemanager.googleapis.com/v3/tagValues
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesSetIamPolicy — Set Tag Values Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:setIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesGet — Get Tag Values
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesDelete — Delete Tag Values
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesPatch — Patch Tag Values
  PATCH https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesGetNamespaced — Get Tag Values Namespaced
  GET https://cloudresourcemanager.googleapis.com/v3/tagValues/namespaced
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesTestIamPermissions — Tag Values Test Iam Permissions
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:testIamPermissions
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesTagHoldsList — List Tag Values Tag Holds
  GET https://cloudresourcemanager.googleapis.com/v3/{+parent}/tagHolds
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesTagHoldsCreate — Create Tag Values Tag Holds
  POST https://cloudresourcemanager.googleapis.com/v3/{+parent}/tagHolds
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagValuesTagHoldsDelete — Delete Tag Values Tag Holds
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsTestIamPermissions — Projects Test Iam Permissions
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:testIamPermissions
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsGet — Get Projects
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsDelete — Delete Projects
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsPatch — Patch Projects
  PATCH https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsSearch — Search Projects
  GET https://cloudresourcemanager.googleapis.com/v3/projects:search
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsList — List Projects
  GET https://cloudresourcemanager.googleapis.com/v3/projects
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsCreate — Create Projects
  POST https://cloudresourcemanager.googleapis.com/v3/projects
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsUndelete — Projects Undelete
  POST https://cloudresourcemanager.googleapis.com/v3/{+name}:undelete
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsGetIamPolicy — Get Projects Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:getIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsMove — Move Projects
  POST https://cloudresourcemanager.googleapis.com/v3/{+name}:move
  https://cloud.google.com/resource-manager
- cloudresourcemanagerProjectsSetIamPolicy — Set Projects Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:setIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysList — List Tag Keys
  GET https://cloudresourcemanager.googleapis.com/v3/tagKeys
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysCreate — Create Tag Keys
  POST https://cloudresourcemanager.googleapis.com/v3/tagKeys
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysGet — Get Tag Keys
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysDelete — Delete Tag Keys
  DELETE https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysPatch — Patch Tag Keys
  PATCH https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysGetNamespaced — Get Tag Keys Namespaced
  GET https://cloudresourcemanager.googleapis.com/v3/tagKeys/namespaced
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysTestIamPermissions — Tag Keys Test Iam Permissions
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:testIamPermissions
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysSetIamPolicy — Set Tag Keys Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:setIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerTagKeysGetIamPolicy — Get Tag Keys Iam Policy
  POST https://cloudresourcemanager.googleapis.com/v3/{+resource}:getIamPolicy
  https://cloud.google.com/resource-manager
- cloudresourcemanagerFetchResourceSemantics — Fetch Resource Semantics
  GET https://cloudresourcemanager.googleapis.com/v3:fetchResourceSemantics
  https://cloud.google.com/resource-manager
- cloudresourcemanagerOperationsGet — Get Operations
  GET https://cloudresourcemanager.googleapis.com/v3/{+name}
  https://cloud.google.com/resource-manager

## A useful first question
List the projects in our cloud organization.

## If it fails
Check the account, expired authorization, app approval, provider scopes and Toolcape permissions. Share only redacted errors with support. Never paste passwords, tokens or client secrets into an AI conversation.