How to connect Google BigQuery to Composio

3 min read

Composio connects AI agents to Google BigQuery so they can find accessible BigQuery projects and work with datasets and query results.

Use your own Google OAuth app to control its credentials and the permissions your workflow requests.

Use a Google Cloud project and a Google account with IAM access to the BigQuery resources your workflow needs. For basic exploration, Google offers a limited BigQuery sandbox without a billing account.

Part 1. Set up your Google OAuth app

Step 1. Select a project and enable the API

Open Google Cloud Console and select the project that will own your OAuth client.

Choose the Google Cloud project that owns your OAuth app

In APIs & Services → Library, find the service for your workflow. Enable the BigQuery API (bigquery.googleapis.com) in your Google Cloud project.

Step 2. Configure branding and audience

Open Google Auth Platform → Branding. Enter an app name, support email, and developer contact details.

Set up app branding and contact information

Under Audience, choose the audience that matches your users. For an external app in Testing, add the accounts you will use under Test users.

Choose the audience and add test users when needed

Step 3. Choose permissions for your workflow

Open Google Auth Platform → Data Access and select Add or remove scopes. Add the scopes your workflow needs and save.

The project-listing example uses bigquery.readonly. Composio checks your Google account identity through the userinfo endpoint, so include userinfo.email for this example. Choose job or data permissions separately when your workflow needs them.

The example requests https://www.googleapis.com/auth/bigquery.readonly, https://www.googleapis.com/auth/userinfo.email. Choose scopes for the actions you plan to use.

BigQuery project-listing permissions · BigQuery sandbox and billing

Step 4. Create the OAuth client

Open Google Auth Platform → Clients, select Create client, and choose Web application.

Choose Web application for the OAuth client

Under Authorized redirect URIs, add the production callback used by the Composio auth form.

https://backend.composio.dev/api/v1/auth-apps/add

Register the Composio production redirect URI

Select Create. Save the client ID and copy or download the client secret before you close the dialog. Google shows the full secret once. Store it privately.

Find the OAuth client settings after creation

Part 2. Connect Google BigQuery in Composio

Step 1. Create an auth config

In the Composio dashboard, open Auth Configs → Create and select Google BigQuery. Enter a config name and choose Next.

Select OAuth 2.0 if prompted. Choose Your Own Credentials when that option appears. Enter your client ID and client secret, verify the redirect URI, and select the scopes your workflow requires. Then select Create Auth Config.

Step 2. Authorize the account

Open the auth config and select Connect Account. Sign in with a Google account that meets the prerequisites above and review the permissions before you continue.

OAuth scopes and Google Cloud IAM both apply. If a project or dataset is missing, check the signed-in user’s access. Review BigQuery pricing and job permissions before running queries or loading data.

Step 3. Verify the connection

Return to the auth config and check that the connected account shows Active in Accounts.

Before using the app in production

Review Google’s verification requirements for the audience and scopes you chose. External apps in Testing can receive refresh tokens that expire after seven days. Check the requirements for your app before inviting production users.

Google OAuth verification

Share