--- title: Google CloudSQL API Integration on Truto slug: gcpcloudsql category: Application Development canonical: "https://truto.one/integrations/detail/gcpcloudsql/" --- # Google CloudSQL API Integration on Truto **Category:** Application Development **Status:** Generally available ## Unified APIs ### Unified User Directory API - **Groups** — Groups are a collection of users in the source application. In some applications, they might also be called Teams. - **Me** — - **Users** — The User object represents a User. - **Workspaces** — Workspaces represent concepts like teams, workspaces, projects in apps that support them ## How it works 1. **Link your customer's Google CloudSQL account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Google CloudSQL.** The Proxy API is a 1-to-1 mapping of the Google CloudSQL API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Audit cloud database security posture on behalf of customers** — Security and compliance SaaS products can connect to their customers' Google Cloud SQL instances to continuously monitor for misconfigurations like public IP exposure, disabled SSL enforcement, or overly permissive network rules — surfacing risks automatically. - **Automate database provisioning in self-serve developer portals** — Internal developer platform (IDP) products can offer one-click staging environment creation by cloning production Cloud SQL instances, provisioning users, and injecting credentials — all without customers leaving the portal. - **Power cloud cost optimization with instance-level visibility** — FinOps SaaS platforms can pull Cloud SQL instance configurations and sizing details to identify over-provisioned databases and recommend or execute rightsizing actions, directly saving their customers money. - **Enable safe database migrations with automated backup workflows** — CI/CD and database migration tools can trigger on-demand Cloud SQL backups before risky schema changes and automatically restore if something goes wrong, giving their users a safety net built into every deployment. ## What you can build - **Cloud SQL instance inventory dashboard** — List and display all of a customer's Cloud SQL instances with metadata like engine type, machine tier, storage usage, and network configuration in a single unified view. - **One-click database cloning for staging environments** — Let end users clone a production Cloud SQL instance into an isolated staging copy directly from your product's UI. - **Security misconfiguration alerts** — Continuously check Cloud SQL instance settings and fire alerts when SSL is not required, public IPs are enabled, or authorized networks are too broad. - **Automated pre-migration backup trigger** — Programmatically create an on-demand backup of a Cloud SQL instance before executing a schema migration or data transformation job. - **Database user and credential provisioning** — Allow your customers to create new database users and logical databases on their Cloud SQL instances without leaving your application. - **Instance rightsizing recommendations** — Pull instance configuration details and surface actionable recommendations when a Cloud SQL instance's machine type or storage tier exceeds actual workload needs. ## FAQs ### How does authentication work for the Google Cloud SQL integration? Google Cloud SQL's Admin API uses OAuth 2.0 for authentication. Truto handles the OAuth flow so your end users can securely connect their GCP accounts without you managing tokens, refresh cycles, or service account key files. ### Does this integration access the data inside the database tables? No. The Cloud SQL Admin API is a control-plane API — it manages instances, databases, users, backups, and configurations. It does not read or write row-level data from the actual database tables. Data-plane access requires a direct database connection (e.g., via Cloud SQL Proxy). ### Are there specific tools or unified API resources available for Google Cloud SQL today? Google Cloud SQL tools and resources are built on request. Truto can map Cloud SQL Admin API operations to your needs and, where applicable, surface user and access data through the Unified User Directory API. Contact Truto to scope your specific requirements. ### What are the rate limits for the Google Cloud SQL Admin API? Google applies per-project quota limits to the Cloud SQL Admin API, typically measured in requests per minute. The exact limits depend on the GCP project's quota settings. Truto manages retries and backoff so your integration handles rate limiting gracefully. ### Which database engines does Google Cloud SQL support? Google Cloud SQL supports MySQL, PostgreSQL, and SQL Server. The Admin API provides a consistent interface across all three engines for instance management, user provisioning, backups, and configuration. ### Can I use this integration to manage instances across multiple GCP projects? Yes, as long as the authenticated user or service account has the appropriate IAM permissions across those projects. Each connected account in Truto represents an authorized GCP identity, and you can list and manage Cloud SQL instances in any project that identity can access.