April 24, 2026
AgentKit

Google BigQuery: service account JSON key auth. Data agents connect without a user OAuth flow.

BigQuery doesn't offer user OAuth for backend access — service account JSON keys are the GCP standard. Scalekit stores the key securely and injects credentials at proxy time. Agent code specifies the query; Scalekit handles everything else.

BigQuery is the standard data warehouse for GCP-native data teams. Service account JSON key auth is GCP's own recommended pattern for server-to-server access. This connector closes the gap for data agents operating in GCP environments that need to query or write BigQuery without a user in the loop.

BigQuery Service Account

A financial reporting agent generates weekly revenue summaries by querying BigQuery across multiple project datasets. The agent authenticates using a GCP service account JSON key registered in Scalekit. Scalekit handles credential storage and injection — the agent code only specifies the query and dataset. The key material never touches the agent runtime.

What's included

  • Scalekit stores the JSON key securely and handles credential injection at proxy time.
  • Agent code is fully decoupled from credential management.
  • Pairs with OAuth M2M and Snowflake key-pair as the complete data agent auth story.
  • GCP service account provisioning pattern — consistent with how every data team configures BigQuery access.
Share on

Google BigQuery: service account JSON key auth. Data agents connect without a user OAuth flow.

BigQuery is the standard data warehouse for GCP-native data teams. Service account JSON key auth is GCP's own recommended pattern for server-to-server access. This connector closes the gap for data agents operating in GCP environments that need to query or write BigQuery without a user in the loop.

BigQuery Service Account

A financial reporting agent generates weekly revenue summaries by querying BigQuery across multiple project datasets. The agent authenticates using a GCP service account JSON key registered in Scalekit. Scalekit handles credential storage and injection — the agent code only specifies the query and dataset. The key material never touches the agent runtime.

What's included

  • Scalekit stores the JSON key securely and handles credential injection at proxy time.
  • Agent code is fully decoupled from credential management.
  • Pairs with OAuth M2M and Snowflake key-pair as the complete data agent auth story.
  • GCP service account provisioning pattern — consistent with how every data team configures BigQuery access.
Schedule a demo with Scalekit today.