# Google Cloud Storage

## Overview

Google Cloud Storage is a scalable, fully-managed object storage service for unstructured data. Integrate with Google Cloud Storage to enable Suger AI to list buckets, browse objects, read file contents, and inspect object metadata.

### Org-Level vs User-Level

> **Org-Level**: Uses a GCP service account for organization-wide access to Cloud Storage buckets. Best for shared storage management.
>
> **User-Level**: Not applicable — Cloud Storage is an org-level integration only.

## Create Integration (Org-Level)

### Prerequisites

- GCP project with Cloud Storage API enabled
- Service account with Storage Admin role

### Authenticate by Service Account

1. [Create a service account](https://docs.cloud.google.com/iam/docs/service-accounts-create) in your GCP project
2. Grant the service account the `Storage Admin` role
3. [Create a service account key](https://docs.cloud.google.com/iam/docs/keys-create-delete#creating) and download the JSON file
4. Enter the service account email and upload the JSON key in Suger

## Suger AI Tools

Suger AI uses a **middleware** strategy — wrapping the Google Cloud Storage API directly.

> **Org-level only**: Cloud Storage tools use the org-level service account credentials.

| Tool | Description |
|------|-------------|
| `googlestorage_list_buckets` | List accessible GCS buckets for this integration |
| `googlestorage_list_objects` | List objects in a bucket (supports prefix filter and directory-style listing) |
| `googlestorage_get_object_metadata` | Get metadata for an object (size, content type, creation time) |
| `googlestorage_read_object_content` | Read the text content of an object (text and JSON, up to 1 MB) |

## Edit Integration

Editing is not supported. To change configuration, delete and recreate.

## Delete Integration

Deleting removes the integration and revokes access. No recovery window.

:::warning
You must also remove the service account access in GCP Console.
:::