Agentic Data Plane

rpk ai mcp-server google-identity

Show the identity a google_identity_aware_proxy gate mints Google ID tokens with, by impersonating your service account with no key. Your Google Cloud project trusts this identity, then the gateway can pass Identity-Aware Proxy or an authenticated Cloud Run service as that account.

On AWS the trust can be one MCP server’s: name the server (one that exists, or the name you will create it with) and it prints the Workload Identity Federation setup and the binding that lets that server, and no other on the gateway, mint as the account. On Google Cloud the gateway has one identity, so the binding trusts every MCP server on it.

Needs the permission to create MCP servers.

This command was introduced in ai version 0.2.97.

Usage

rpk ai mcp-server google-identity [flags]

Examples

This section provides examples of how to use rpk ai mcp-server google-identity.

rpk ai mcp-server google-identity internal-app

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.