Google Looker

Live

OAUTH 2.0

ANALYTICS

Analytics

Every dashboard, Look, and LookML model your data agent needs to query lives in Google Looker. Google Looker MCP gives your agent per-user OAuth access to BI data scoped to the authorizing analyst.

  • Acts as the user: Dashboard and data access stays tied to the Looker user who authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
Google Looker
agent · Acme Q3
Run
Run the Q4 revenue by region Look and give me the top 3 regions by growth.
S
looker_look_run
234ms
Analytics agent
Top 3 by Q4 growth: APAC +34% ($2.1M), EMEA +28% ($3.8M), LATAM +22% ($890K). North America leads total revenue ($8.2M) but grew only 11%.
Sources: Looker Q4 Revenue by Region Look
googlelooker
3
18:29
Message Claude...

Tools your agent reaches for on Google Looker, scoped per user.

CALL ANY TOOL
Browse dashboards, run Looks, query LookML models, and access BI data. Same toolkit, every framework, no auth plumbing.
googlelooker_create_dashboard
Create dashboard
Create a new, empty Looker dashboard. Requires a title and the ID of the folder it should live in; a dashboard's title must be unique within that destination folder. Add tiles afterward from the Looker UI or the dashboard element APIs.
Parameters
Name
Type
Required
Description
folder_id
string
Required
ID of the folder this dashboard should be created in
title
string
Required
Title for the new dashboard
background_color
string
Optional
Background color for the dashboard, as a hex string
crossfilter_enabled
boolean
Optional
Enable cross-filtering between tiles on this dashboard
description
string
Optional
Optional description of the dashboard
googlelooker_create_folder
Create folder
googlelooker_create_look
Create look
googlelooker_create_query
Query create
googlelooker_create_scheduled_plan
Create scheduled plan
googlelooker_delete_dashboard
Delete dashboard
googlelooker_delete_folder
Delete folder
googlelooker_delete_look
Delete look
googlelooker_delete_scheduled_plan
Delete scheduled plan
googlelooker_get_current_user
Get current user
googlelooker_get_dashboard
Get dashboard
googlelooker_get_folder
Get folder
googlelooker_get_look
Get look
googlelooker_get_look_results
Get look results
googlelooker_get_query
Query get
googlelooker_list_dashboards
List dashboards
googlelooker_list_explores
List explores
googlelooker_list_folders
List folders
googlelooker_list_looks
List looks
googlelooker_list_models
List models
googlelooker_list_scheduled_plans
List scheduled plans
googlelooker_run_inline_query
Query run inline
googlelooker_run_look
Run look
googlelooker_run_query
Query run
googlelooker_run_scheduled_plan_once
Run scheduled plan once
googlelooker_search_dashboards
Search dashboards
googlelooker_search_looks
Search looks
googlelooker_update_dashboard
Update dashboard
googlelooker_update_folder
Update folder
googlelooker_update_look
Update look

For more tools, view docs.

Build your Agent
Drop the toolkit in, point it at the user, and your agent can query Looker dashboards and run Looks from the first run.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["googlelooker"], toolNames: ["looker_dashboards_list", "looker_look_run", "looker_query_run"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["googlelooker"], toolNames: ["looker_dashboards_list", "looker_look_run", "looker_query_run"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["googlelooker"], toolNames: ["looker_dashboards_list", "looker_look_run", "looker_query_run"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/googlelooker",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your analytics agent to start querying Looker BI data.
Search & recall
Copy the prompt
Copied
List all dashboards in the [folder name] folder.
Copy the prompt
Copied
Run the [Look name] Look and return the results.
Copy the prompt
Copied
Search for dashboards related to [topic].
Query & analyze
Copy the prompt
Copied
Query the [model].[explore] Explore for [fields] filtered by [condition].
Copy the prompt
Copied
Get all available dimensions in the [explore] explore.
Copy the prompt
Copied
Run the [Look ID] Look and return the top [N] rows.
SEE HOW AUTH WORKS
Analysts authorize Looker once. Their Google credentials stay vaulted, every query runs under their Looker permissions, and every access is logged.
1
Authorize
Your user connects
Google Looker
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Google Looker
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Google Looker
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Google Looker
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
Same per-user auth pattern across other analytics and BI connectors.
GTM and RevOps Teams
Revenue forecast commentary
Pulls open pipeline from Salesforce and HubSpot, calculates coverage against quota, flags at-risk stages, posts commentary to Slack, and logs every snapshot to Google Sheets.
GTM and RevOps Teams
Deal intelligence agent
Pulls recent Gong calls, scores deal risk with an LLM, cross-references the record in Attio, and DMs each owner their at-risk deals in Slack. Every read is scoped to that rep's own access.
Engineering Teams
Engineering standup agent
Pulls commits from GitHub and GitLab, tracks issue movement in Jira, and posts a per-engineer standup brief to Slack. Each engineer's activity is read on their own delegated OAuth.
GTM and RevOps Teams
Competitive intelligence briefing agent
Scans Gong calls for competitor mentions, matches each one to its Notion battlecard, and DMs every affected rep a single Slack digest per cycle. Every call runs as the PMM who owns the briefing, never a shared bot.
Test other agents
Same per-user auth pattern across other analytics and BI connectors.
SALES
Deal intelligence agent
Score Gong call risk with an LLM, cross-reference the Attio record, and DM each owner their at-risk deals in Slack.
ENGINEERING
Engineering standup agent
Pull commits from GitHub and GitLab, track Jira issue movement, and post a per-engineer standup brief to Slack.
GTM
Revenue forecast agent
Score pipeline coverage against quota across Salesforce and HubSpot, post forecast commentary to Slack, log snapshots to Sheets.
GTM
Competitive intelligence briefing agent
Scan Gong calls for competitor mentions, match each one to its Notion battlecard, and DM every affected rep a single Slack digest.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Google Looker today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Looker as the user or a shared service account?
As the user. Each analyst authorizes once and Scalekit resolves their credential. Queries run with that analyst's Looker row-level security and field access.
Where is the Looker OAuth token stored?
In Scalekit's AES-256 vault, namespaced per tenant. Tokens never appear in prompts or LLM context.
Can I restrict the agent to specific models or Explores?
Yes. Looker's own user-attribute-based access controls apply per user. Scalekit enforces credentials and audits calls on top.
What happens when an analyst revokes Looker access?
The connection is invalidated on the next tool call. Subsequent requests fail closed. Other analysts remain unaffected.
Does this work with self-hosted Looker Core?
Yes. Set the proxy_url to your Looker Core instance endpoint. The auth pattern and vault behavior are identical.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""googlelooker"": {
""url"": ""https://mcp.scalekit.com/googlelooker"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.googlelooker]
url = ""https://mcp.scalekit.com/googlelooker""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""googlelooker"": {
""url"": ""https://mcp.scalekit.com/googlelooker"",
""type"": ""http""
}
}
}