BLOG
Notes from the policy gate.
On giving AI agents real account access without giving them the whole house.
BigQuery MCP write access, granted per statement type
Read-only SQL or the whole write surface is a false choice. Statement-typed grants — classified by Google's own parser, failing closed on scripts and procedures — are the missing middle.
Google Ads MCP write access, governed by dollar caps
The official server is read-only; community servers write without bounds. The missing middle is typed grants with priced budget changes.