Files
google--adk-python/contributing/samples/mcp/mcp_service_account_agent
wehub-resource-sync ec2b666284
Continuous Integration / Pre-commit Linter (push) Has been cancelled
Continuous Integration / Mypy Check (Python 3.10) (push) Has been cancelled
Continuous Integration / Mypy Check (Python 3.11) (push) Has been cancelled
Continuous Integration / Mypy Check (Python 3.12) (push) Has been cancelled
Continuous Integration / Mypy Check (Python 3.13) (push) Has been cancelled
Continuous Integration / Unit Tests (Python 3.10) (push) Has been cancelled
Continuous Integration / Unit Tests (Python 3.11) (push) Has been cancelled
Continuous Integration / Unit Tests (Python 3.12) (push) Has been cancelled
Continuous Integration / Unit Tests (Python 3.13) (push) Has been cancelled
Continuous Integration / Unit Tests (Python 3.14) (push) Has been cancelled
Continuous Integration / A2A v0.3 Tests (Python 3.10) (push) Has been cancelled
Continuous Integration / A2A v0.3 Tests (Python 3.11) (push) Has been cancelled
Continuous Integration / A2A v0.3 Tests (Python 3.12) (push) Has been cancelled
Copybara PR Handler / close-imported-pr (push) Has been cancelled
Continuous Integration / A2A v0.3 Tests (Python 3.13) (push) Has been cancelled
Continuous Integration / A2A v0.3 Tests (Python 3.14) (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 13:25:13 +08:00
..

MCP Service Account Agent Sample

This agent demonstrates how to connect to a remote MCP server using a gcloud service account for authentication. It uses Streamable HTTP for communication.

Setup

Before running the agent, you need to configure the MCP server URL and your service account credentials in agent.py.

  1. Configure MCP Server URL: Update the MCP_SERVER_URL variable with the URL of your MCP server instance.

    # agent.py
    # TODO: Update this to the production MCP server url and scopes.
    MCP_SERVER_URL = "https://test.sandbox.googleapis.com/mcp"
    
  2. Set up Service Account Credentials:

    • Obtain the JSON key file for your gcloud service account.
    • In agent.py, find the ServiceAccountCredential object and populate its parameters (e.g., project_id, private_key, client_email, etc.) with the corresponding values from your JSON key file.
    # agent.py
    # TODO: Update this to the user's service account credentials.
    auth_credential=AuthCredential(
        auth_type=AuthCredentialTypes.SERVICE_ACCOUNT,
        service_account=ServiceAccount(
            service_account_credential=ServiceAccountCredential(
                type_="service_account",
                project_id="example",
                private_key_id="123",
                private_key="123",
                client_email="test@example.iam.gserviceaccount.com",
                client_id="123",
                auth_uri="https://accounts.google.com/o/oauth2/auth",
                token_uri="https://oauth2.googleapis.com/token",
                auth_provider_x509_cert_url=(
                    "https://www.googleapis.com/oauth2/v1/certs"
                ),
                client_x509_cert_url="https://www.googleapis.com/robot/v1/metadata/x509/example.iam.gserviceaccount.com",
                universe_domain="googleapis.com",
            ),
            scopes=SCOPES.keys(),
        ),
    ),
    

Running the Agent

Once configured, you can run the agent.

For example:

adk web