Google Looker

Coming soon

OAUTH 2.0

ANALYTICS

Analytics

Every dashboard, Look, and LookML model your data agent needs to query lives in Google Looker. Google Looker MCP gives your agent per-user OAuth access to BI data scoped to the authorizing analyst.

  • Acts as the user: Dashboard and data access stays tied to the Looker user who authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
Google Looker
agent · Acme Q3
Run
Run the Q4 revenue by region Look and give me the top 3 regions by growth.
S
looker_look_run
234ms
Analytics agent
Top 3 by Q4 growth: APAC +34% ($2.1M), EMEA +28% ($3.8M), LATAM +22% ($890K). North America leads total revenue ($8.2M) but grew only 11%.
Sources: Looker Q4 Revenue by Region Look
googlelooker
3
18:29
Message Claude...

Tools your agent reaches for on Google Looker, scoped per user.

CALL ANY TOOL
Browse dashboards, run Looks, query LookML models, and access BI data. Same toolkit, every framework, no auth plumbing.
looker_dashboards_list
List dashboards
List all dashboards accessible to the authorizing Looker user with titles, folder, and last-updated metadata.
Parameters
Name
Type
Required
Description
folder_id
string
Optional
Filter by folder ID
limit
integer
Optional
Max dashboards to return
looker_look_run
Run Look
looker_query_run
Run inline query
looker_explore_get
Get explore fields
looker_content_search
Search content
Build your Agent
Drop the toolkit in, point it at the user, and your agent can query Looker dashboards and run Looks from the first run.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["googlelooker"], toolNames: ["looker_dashboards_list", "looker_look_run", "looker_query_run"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["googlelooker"], toolNames: ["looker_dashboards_list", "looker_look_run", "looker_query_run"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["googlelooker"], toolNames: ["looker_dashboards_list", "looker_look_run", "looker_query_run"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/googlelooker",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your analytics agent to start querying Looker BI data.
Search & recall
Copy the prompt
Copied
List all dashboards in the [folder name] folder.
Copy the prompt
Copied
Run the [Look name] Look and return the results.
Copy the prompt
Copied
Search for dashboards related to [topic].
Query & analyze
Copy the prompt
Copied
Query the [model].[explore] Explore for [fields] filtered by [condition].
Copy the prompt
Copied
Get all available dimensions in the [explore] explore.
Copy the prompt
Copied
Run the [Look ID] Look and return the top [N] rows.
SEE HOW AUTH WORKS
Analysts authorize Looker once. Their Google credentials stay vaulted, every query runs under their Looker permissions, and every access is logged.
1
Authorize
Your user connects
Google Looker
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Google Looker
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Google Looker
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Google Looker
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
Same per-user auth pattern across other analytics and BI connectors.
No items found.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
Other connector libraries treat auth as a demo afterthought. Scalekit starts with user identity, scope enforcement, and audit.
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Google Looker today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Looker as the user or a shared service account?
As the user. Each analyst authorizes once and Scalekit resolves their credential. Queries run with that analyst's Looker row-level security and field access.
Where is the Looker OAuth token stored?
In Scalekit's AES-256 vault, namespaced per tenant. Tokens never appear in prompts or LLM context.
Can I restrict the agent to specific models or Explores?
Yes. Looker's own user-attribute-based access controls apply per user. Scalekit enforces credentials and audits calls on top.
What happens when an analyst revokes Looker access?
The connection is invalidated on the next tool call. Subsequent requests fail closed. Other analysts remain unaffected.
Does this work with self-hosted Looker Core?
Yes. Set the proxy_url to your Looker Core instance endpoint. The auth pattern and vault behavior are identical.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""googlelooker"": {
""url"": ""https://mcp.scalekit.com/googlelooker"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.googlelooker]
url = ""https://mcp.scalekit.com/googlelooker""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""googlelooker"": {
""url"": ""https://mcp.scalekit.com/googlelooker"",
""type"": ""http""
}
}
}