Skip to main content
Read-only. Xerg lists resources (Cloud Run, functions, databases, buckets, clusters, topics, secret names) through Cloud Asset Inventory. It doesn’t read data or secret values, and can’t change anything. Only admins and owners can connect services. See Connecting a service for where to find Connect, refreshing and disconnecting.

​
What Xerg lists

  • Cloud Run services
  • Cloud Functions
  • Cloud Functions (1st gen)
  • App Engine apps
  • Cloud SQL databases
  • Firestore databases
  • Spanner instances
  • AlloyDB clusters
  • Memorystore Redis instances
  • BigQuery datasets
  • Storage buckets
  • GKE clusters
  • Compute Engine VMs
  • Pub/Sub topics
  • Cloud Tasks queues
  • Artifact Registry repositories
  • Secrets (names only)
  • Cloud DNS zones
  • Vertex AI endpoints

​
Connect with a key

  1. Open service accounts in Google Cloud
  2. Create one named xerg-readonly. Give it the Cloud Asset Viewer role (on the project, or on the organization to map every project).
  3. Turn on the Cloud Asset API in that service account’s project
  4. Open the service account → Keys → Add key → JSON. Paste the whole file into Xerg. Leave the scope empty to map just its own project.
  5. If your organization blocks key creation, email us
Xerg asks for: Service account key (JSON); Scope, optional.