You can use the following MCP server endpoints to enable LLM agents to perform investigative and management tasks in Security Command Center.

Using gcloud CLI, the securitycenter REST API, or client libraries, you can configure Pub/Sub and BigQuery continuous export to receive notifications when…

Using gcloud CLI, the securitycenter REST API, or client libraries, you can configure Pub/Sub and BigQuery continuous export to receive notifications when findings are deleted from Security Command Center due to data retention policies.

Artifact guard with CI/CD integration is deprecated.

It will be shut down on October 30, 2026.

Event Threat Detection integrates with Sensitive Data Protection to enrich findings that affect sensitive resources.

For more information, see Sensitive data enrichment.

Risk Engine detects and reports reasoning engines that can modify IAM policies and perform lateral movement.

These findings are generated as a toxic combination.

The following Security Command Center finding category names from AI Protection have new names to clarify that AI Protection detects tuned models and to remove…

The following Security Command Center finding category names from AI Protection have new names to clarify that AI Protection detects tuned models and to remove the legacy VERTEX_1P_ prefix: