Skip to content
stack
Get started
Provider · Cloud

GCP — Ashlr Stack Provider

GCP: Google Cloud Platform. Service-account JSON + project ID stored in Phantom. Review adapter-specific setup, credential and MCP requirements in Ashlr Stack.

Cloud · API key KEY-ONLY · supplied credential attachment
GCP — Google Cloud Platform. Service-account JSON + project ID stored in Phantom.
Dashboard ↗

One command

Run one provider setup from an initialized project. Its adapter may handle auth inputs, run its available credential checks, then attempt persistence through Phantom. Supabase, Neon, Turso and Vercel have source resource-creation branches; other adapters attach accounts or supplied credentials. Inspect actual results. 

stack add gcp

Or retrieve catalog matches for what you're building via stack recommend: 

stack recommend "raw cloud infrastructure for scale"

Auth flow

Supply the adapter's API-key inputs. Some checks only validate structure or a limited endpoint; additional credentials and manual setup may be needed.

How-to: Download a service-account JSON key from GCP → IAM & Admin → Service Accounts and paste the full JSON.

Secret slots

stack add gcp has these 2 catalog secret slots; verify which values its adapter actually materializes through Phantom:

  • GCP_SERVICE_ACCOUNT_JSON
  • GCP_PROJECT_ID

Use stack env export --example for an empty-key skeleton. Stack does not automatically fill env files or resolve credential placeholders. stack exec -- <cmd> forwards to installed Phantom exec; configure and verify the app separately.

  • AWS — S3, Lambda, RDS. IAM access keys stored in Phantom.
  • DigitalOcean — Droplets, Kubernetes, managed databases. Personal access token verified via /v2/account.
  • Hetzner — Affordable European cloud servers. API token verified via /v1/locations.

Catalog notes

v1 validates JSON shape and project_id field only — live project endpoint verification requires an OAuth2 token exchange; deferred to v0.2.

FAQ

Do I need a GCP account to use it with Stack?

Use an existing GCP account and permissions appropriate to the adapter. Creation or attachment behavior is provider-specific. Supply the adapter's API-key inputs. Some checks only validate structure or a limited endpoint; additional credentials and manual setup may be needed. If you don't have a credential yet, create one at https://console.cloud.google.com and supply the required inputs; inspect verification and persistence results.

Where does Stack store my GCP credentials?

Credential persistence uses the installed Phantom Secrets interface. The catalog declares slot names (GCP_SERVICE_ACCOUNT_JSON, GCP_PROJECT_ID); actual materialized outputs can differ. Stack handles supplied values in memory and records dedicated names in config; manual files and freeform metadata are not generally redacted.

Can I rotate or revoke this integration later?

Use `stack remove gcp` for local GCP configuration/MCP cleanup and attempted Phantom cleanup; upstream resources remain. Cleanup can refuse or leave keys stored. Rotate or revoke the underlying GCP credentials through https://console.cloud.google.com, then update and verify each consumer separately. Doctor does not rotate tokens and can skip already-stored names.

Outbound