Integration

Google Cloud is a hosting target you reach with a service-account key. You paste the key, and the agent uses it for the work in a Plan you approved.

What it does

• Deploys to the Google Cloud services a Plan names, using your key.
• Reads back whether a deploy succeeded, so the result shows in Selfbase.
• Mints one token from the key when you paste it, so a truncated copy is caught then.
• Waits for you. The agent never ships on its own, on any plan.

Connecting

Open Workspace settings, then Connections, and choose Google Cloud. Paste a service-account JSON key from IAM, then Service accounts, then Keys.

What each permission is for

• A service-account JSON key The key can do whatever roles you granted that service account. Grant it only the roles the work needs before you paste it.
• https://www.googleapis.com/auth/cloud-platform The scope the key is exchanged for. It is the breadth the service account already has, not additional access.

We do not ask for your Google account sign-in. Only the pasted service-account key is used.

How your credentials are held

Your credential is encrypted with a key that belongs to your workspace and stored as ciphertext. It is decrypted only at the moment it is used, and never inside a sandbox where code runs. We never log it.

Removing it

Disconnect under Workspace settings, then Connections, which deletes our copy. Delete the key in the Google Cloud console to end our access immediately.

To have everything Selfbase holds about you deleted, see data deletion.

Support

Email hello@selfbase.com. Our privacy policy and terms cover every integration.