Reads
Answer straight away. Nothing changes.
- Table metadata and schemas
- Constructed SELECT dry runs
- Status and bounded results for this account's admitted jobs
Analytics · MCP server
Review query costs before execution.
MegaMCP is a hosted BigQuery MCP server that lets Claude, ChatGPT and Cursor read dataset tables, schemas and query cost estimates and propose query runs with an explicit byte limit that you approve.
Rolling outBuilt, and switching on as approvals land.What this meansRolling out means the code is built and the platform is still approving MegaMCP's app: Google, Meta, Microsoft and the one-click ad-platform sign-ins switch on as each approval lands.
Live demo
Ask in plain English. Your AI reads BigQuery with real MegaMCP tools, then hands you a plan. Nothing moves until a person clicks Approve, and supported changes can be undone.
Tools in this example
bigquery_dry_run_selectReads live databigquery_execute_selectProposes a change planTotal cost by campaign for September from the ads table. Keep it under 2 GB.
bigquery_dry_run_selectDonescans 1.2 GBbigquery_execute_selectWaiting for approvalplan readyA dry run says this query scans 1.2 GB. Here's the run, with a 2 GB byte limit.
Done. 38 rows, 1.2 GB billed.
What your AI can do
Inspect an enabled dataset, construct a bounded SELECT, and review its dry-run byte estimate before approving execution. This list comes straight from the running product: 5 read tools and 1 write tool.
Answer straight away. Nothing changes.
Each one returns a plan with a diff. Nothing moves until a person approves.
Reads never execute paid queries. Execution is irreversible and byte-limited, not dollar-limited. Raw SQL, joins, views, external tables, DDL and DML are unavailable.
Plus complete diff previews, human approvals and the flight recorder on every connection. Live changes require a paid plan.
| What it does | Tool id | Type |
|---|---|---|
| List client dataset tables | bigquery_list_tables | Read |
| Inspect allowed native table | bigquery_get_table_schema | Read |
| Estimate bounded SELECT cost | bigquery_dry_run_select | Read |
| Propose bounded query execution | bigquery_execute_select | Change |
| Reconcile approved query job | bigquery_get_query_job | Read |
| Read approved query results | bigquery_get_query_results | Read |
Example prompts
Paste any of these into Claude, ChatGPT or Cursor once BigQuery is connected.
“List native tables in this dataset.”
“Dry-run these selected columns and filters.”
“Prepare this query with an explicit maximum bytes billed.”
“Show the schema of the events table.”
“How many bytes would this query scan?”
“Which columns hold campaign IDs?”
“Run the approved query with a 1 GB maximum bytes billed.”
“Read the results of the query I approved.”
Setup
About two minutes for Claude, ChatGPT or Cursor. Nothing to install.
Start a free workspace and open Connections. Requires Google BigQuery consent, enabled API and dataset/table access plus query-job permission. The billing project is the chosen dataset project.
Every app uses the same server URL.
https://megamcp.com/api/mcpTry “List native tables in this dataset.” Reports answer straight away. Anything that changes BigQuery comes back as a plan for you to approve.
Safety
The same loop guards every MegaMCP connection: ask, see the diff, approve, undo.
BigQuery write tools never touch BigQuery directly. They return a plan, and a person approves it in the dashboard, or in chat if an admin allows it.
Every plan lists each change with its before and after values, so you see exactly what will move before it does.
Supported changes reverse through a separately reviewed undo plan. Anything that can't be undone is marked before you approve it.
Platform checks stop stale edits, and the flight recorder logs every tool call, plan and approval, with who did it and from which AI app.
| Time | Event |
|---|---|
| 09:14 | bigquery_list_tables |
| 09:15 | Plan created by Claude |
| 09:16 | Approved by Ana |
FAQ
Yes. As of October 2026, Google runs a managed remote MCP server for BigQuery. MegaMCP takes a cost-first approach for marketers: it dry-runs a bounded SELECT, shows the bytes it would scan, and runs it only after a person approves an explicit byte limit.
An MCP (Model Context Protocol) server lets AI assistants such as Claude, ChatGPT and Cursor use BigQuery through tools. MegaMCP's hosted BigQuery MCP server gives your assistant 5 read tools and 1 write tool for dataset tables, schemas and query cost estimates, and every change waits for a human approval.
Yes. MegaMCP is a remote MCP server with OAuth sign-in, so one URL works in ChatGPT (as an app, with developer mode on), Claude (as a custom connector), Cursor, Claude Code and VS Code. Your AI app's own plan decides whether it can add custom MCP servers.
Yes, with your approval. It can propose query runs with an explicit byte limit changes. Each one comes back as a plan with a line-by-line diff and waits for a human before anything moves. Reads never execute paid queries. Execution is irreversible and byte-limited, not dollar-limited. Raw SQL, joins, views, external tables, DDL and DML are unavailable.
Requires Google BigQuery consent, enabled API and dataset/table access plus query-job permission. The billing project is the chosen dataset project. Public OAuth verification and live acceptance remain pending.
Reading BigQuery is free on MegaMCP's Free plan (100 reads a day, no card). Approved changes are included in every paid plan, from $19/month after a 5-day free trial, with unlimited runs and no credits. MegaMCP adds no markup: any subscription or API usage with the vendor stays between you and them.
Your BigQuery credentials are encrypted at rest (AES-256-GCM) and bound to their connection, and MegaMCP never trains AI models on your data. Your AI only sees the accounts you switch on, members limited to certain clients only see those clients, and every tool call lands in the flight recorder.
5 days. On the house.
No credit card to start. Every workspace comes with a sandbox ad account, so you can watch the whole ask, diff, approve, undo loop before you connect anything real.
New integrations, platform approvals, the occasional dark joke. One or two emails a month. Unsubscribe anytime.