Warehouses connector
BigQuery connector for governed AI agent access
Connect BigQuery with either Google OAuth tokens or a Google Cloud service account JSON key.
Direct answer
OneQuery supports BigQuery for governed agent access.
Teams use the BigQuery connector to give AI agents SQL-style query workflows for structured data access while OneQuery keeps credentials centralized, limits access to approved sources, and preserves audit logs for review.
Agent workflow
What this connector enables
BigQuery becomes an approved OneQuery source instead of a secret copied into an agent prompt, shell session, or model tool. The agent receives a governed access path, and the source credentials stay behind OneQuery.
- Use SQL-style query workflows for structured data access for warehouses context.
- Keep BigQuery credentials centralized and out of agent runtimes.
- Review agent access through OneQuery audit history instead of reconstructing direct service usage.
Setup checklist
Prepare the BigQuery connection
Use bigquery credentials and connect the source through the Dashboard and CLI. Keep credentials scoped to the data the agent is allowed to read.
- Retrieve the Google Cloud `projectId` that owns the datasets OneQuery should query.
- For the live service-account flow, create a Google Cloud service account in that project, grant `BigQuery Data Viewer` and `BigQuery Job User`, then create a JSON key.
- The CLI does not accept raw Google service-account JSON. Map the downloaded key into `serviceAccount.projectId`, `clientEmail`, `privateKey`, and optional `privateKeyId`.
- If you use OAuth instead, provide `accessToken`, `refreshToken`, and `expiresAt` with the BigQuery readonly scope.
FAQ
BigQuery connector questions
What is the OneQuery BigQuery connector?
The OneQuery BigQuery connector makes warehouses context from BigQuery available to AI agents through SQL-style query workflows for structured data access. Connect BigQuery with either Google OAuth tokens or a Google Cloud service account JSON key.
How do AI agents access BigQuery through OneQuery?
Agents call OneQuery instead of receiving raw BigQuery credentials. OneQuery keeps credentials centralized, applies source boundaries, and records access in audit logs while exposing SQL-style query workflows for structured data access.
How do I set up the BigQuery connector?
Prepare bigquery credentials and connect BigQuery from the OneQuery dashboard or CLI. Start with this setup step: Retrieve the Google Cloud `projectId` that owns the datasets OneQuery should query.