list_instancesList all Cloud SQL instances in the project.
get_instanceGet the details of a Cloud SQL instance.
create_instanceInitiates the creation of a Cloud SQL instance. * The tool returns a long-running operation. Use the `get_operation` tool to poll its status until the
execute_sqlExecute any valid SQL statement, including data definition language (DDL), data control language (DCL), data query language (DQL), or data manipulatio
execute_sql_readonlyExecute any valid read only SQL statement on a Cloud SQL instance. To support the `execute_sql_readonly` tool, a Cloud SQL instance must meet the foll
get_operationGet the status of a long-running operation. A long-running operation can take several minutes to complete. If an operation takes an extended amount of
create_userCreate a database user for a Cloud SQL instance. * This tool returns a long-running operation. Use the `get_operation` tool to poll its status until t
update_userUpdate a database user for a Cloud SQL instance. A common use case for the `update_user` is to grant a user the `cloudsqlsuperuser` role, which can pr
clone_instanceCreate a Cloud SQL instance as a clone of a source instance. * This tool returns a long-running operation. Use the `get_operation` tool to poll its st
update_instancePartially updates the configuration settings of a Cloud SQL instance. * This tool returns a long-running operation. Use the `get_operation` tool to po
list_usersList all database users for a Cloud SQL instance.
create_backupTakes a backup on a Cloud SQL instance. Always populate the project and instance fields on the request. The location (region) and description of the b
restore_backupRestores a backup to a Cloud SQL instance. The target_instance and target_project must be provided and populated in the request. The backup identifier
import_dataImport data into a Cloud SQL instance. If the file doesn't start with `gs://`, then the assumption is that the file is stored locally. If the file is
postgres_upgrade_precheckChecks if a Cloud SQL for PostgreSQL instance is ready for a major version upgrade to the specified target version. The `target_database_version` MUST
No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.
We re-grade sqladmin.googleapis.com on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
readOnly vs observed behavior) layer on via the wmcp.sh proxy.