Google has made Data Agent Kit generally available, giving coding agents Model Context Protocol tools for more than 15 Google Data Cloud services plus 37 open-source skills. It works with Antigravity, Claude Code, Codex, Cursor and compatible editors, and comes preinstalled in Cloud Shell and Cloud Workstations.
The skills provide service-specific guidance, such as optimizing BigQuery SQL or designing Bigtable row keys. New general-availability support includes BigQuery Graph, Bigtable and Managed Service for Apache Spark. The repository uses the Apache 2.0 license and publishes versioned releases that teams can pin.
Its safety controls have two different levels of force. A skill named accidental-data-loss-prevention instructs the agent to stop and request explicit consent before destructive actions such as dropping a table or deleting a project. That is guidance the model can follow. An IAM deny policy can instead reject any MCP call whose tool is not marked read-only, enforcing the boundary outside the model.
The IAM control currently applies to Google Cloud MCP servers, and blocked tools still appear in the tool list until invoked. The kit also does not solve whether a timed-out write committed or provide universal rollback semantics. Production deployments therefore still need narrow permissions, idempotent operations and independent confirmation of write results.