Google exposes API-key lifecycle management through a remote MCP server
Google Cloud released an API Keys remote MCP server in preview. Its tools can list keys, retrieve metadata and the secret key string, create or restrict keys, update them, delete them and restore recently deleted keys.
Why it matters: This is a high-consequence agent interface: the same standardized tool layer that helps automate key hygiene can also reveal live secrets or change access. IAM, confirmation, trace and network boundaries become part of credential security.