How to integrate Cloudsmith MCP with Google ADK

This guide walks you through connecting Cloudsmith to Google ADK using the Composio tool router. By the end, you'll have a working Cloudsmith agent that can list recent packages in production repository, delete failed package versions after review, check cloudsmith repository quota usage through natural language commands. This guide will help you understand how to give your Google ADK agent real control over a Cloudsmith account through Composio's Cloudsmith MCP server. Before we dive in, let's take a quick look at the key ideas and tools involved.

Get started for free Get a demo

Cloudsmith

Api Key

Cloudsmith is a cloud-native artifact management platform for software packages, containers, and dependencies. It helps teams securely store, distribute, and govern packages across repositories and environments.

10 Tools

Managed auth

Connect Cloudsmith without auth hassles

We manage OAuth, API keys, token refresh, and scopes — you just build.

Try for free

Introduction

This guide will help you understand how to give your Google ADK agent real control over a Cloudsmith account through Composio's Cloudsmith MCP server.

Before we dive in, let's take a quick look at the key ideas and tools involved.

Also integrate Cloudsmith with

OpenAI Agents SDK Claude Agent SDK Claude Code Claude Cowork Codex OpenClaw Hermes CLI LangChain Vercel AI SDK Mastra AI LlamaIndex CrewAI

TL;DR

Here's what you'll learn:

Get a Cloudsmith account set up and connected to Composio
Install the Google ADK and Composio packages
Create a Composio Tool Router session for Cloudsmith
Build an agent that connects to Cloudsmith through MCP
Interact with Cloudsmith using natural language

What is Google ADK?

Google ADK (Agents Development Kit) is Google's framework for building AI agents powered by Gemini models. It provides tools for creating agents that can use external services through the Model Context Protocol.

Key features include:

Gemini Integration: Native support for Google's Gemini models
MCP Toolset: Built-in support for Model Context Protocol tools
Streamable HTTP: Connect to external services through streamable HTTP
CLI and Web UI: Run agents via command line or web interface

What is the Cloudsmith MCP server, and what's possible with it?

The Cloudsmith MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Cloudsmith account. It provides structured and secure access to your organizations, repositories, packages, vulnerabilities, audit history, quotas, and rate limits, so your agent can discover organizations, inspect repositories, search packages, review security findings, and monitor account activity on your behalf.

Organization and account discovery: Have your agent confirm the connected Cloudsmith user and list the organizations available to that account.
Repository search and inspection: Let the agent find repositories within an organization and review their configuration, visibility, usage, and supported capabilities.
Package search and analysis: Direct your agent to search packages by name, version, format, architecture, distribution, filename, or status, then inspect package metadata, checksums, licensing, and security state.
Vulnerability review: Instruct your agent to list package vulnerability scan summaries for a repository so your team can identify security concerns.
Usage and activity monitoring: Have your agent check storage and bandwidth quotas, review current request limits, and search audit events by action, actor, or time.

What is the Composio tool router, and how does it fit here?

What is Composio SDK?

Composio's Composio SDK helps agents find the right tools for a task at runtime. You can plug in multiple toolkits (like Gmail, HubSpot, and GitHub), and the agent will identify the relevant app and action to complete multi-step workflows. This can reduce token usage and improve the reliability of tool calls. Read more here: Getting started with Composio SDK

The tool router generates a secure MCP URL that your agents can access to perform actions.

How the Composio SDK works

The Composio SDK follows a three-phase workflow:

Discovery: Searches for tools matching your task and returns relevant toolkits with their details.
Authentication: Checks for active connections. If missing, creates an auth config and returns a connection URL via Auth Link.
Execution: Executes the action using the authenticated connection.

Step-by-step Guide

Step by step09 STEPS

Prerequisites

Before starting, make sure you have:

A Google API key for Gemini models
A Composio account and API key
Python 3.9 or later installed
Basic familiarity with Python

Getting API Keys for Google and Composio

Google API Key

Go to Google AI Studio and create an API key.
Copy the key and keep it safe. You will put this in GOOGLE_API_KEY.

Composio API Key and User ID

Log in to the Composio dashboard.
Go to Settings → API Keys and copy your Composio API key. Use this for COMPOSIO_API_KEY.
Decide on a stable user identifier to scope sessions, often your email or a user ID. Use this for COMPOSIO_USER_ID.

Install dependencies

bash

pip install google-adk composio python-dotenv

Inside your virtual environment, install the required packages.

What's happening:

google-adk is Google's Agents Development Kit
composio connects your agent to Cloudsmith via MCP
python-dotenv loads environment variables

Set up ADK project

bash

adk create my_agent

Set up a new Google ADK project.

What's happening:

This creates an agent folder with a root agent file and .env file

Set environment variables

bash

GOOGLE_API_KEY=your-google-api-key
COMPOSIO_API_KEY=your-composio-api-key
COMPOSIO_USER_ID=your-user-id-or-email

Save all your credentials in the .env file.

What's happening:

GOOGLE_API_KEY authenticates with Google's Gemini models
COMPOSIO_API_KEY authenticates with Composio
COMPOSIO_USER_ID identifies the user for session management

Import modules and validate environment

python

import os
import warnings

from composio import Composio
from dotenv import load_dotenv
from google.adk.agents.llm_agent import Agent
from google.adk.tools.mcp_tool.mcp_session_manager import StreamableHTTPConnectionParams
from google.adk.tools.mcp_tool.mcp_toolset import McpToolset

load_dotenv()

warnings.filterwarnings("ignore", message=".*BaseAuthenticatedTool.*")

GOOGLE_API_KEY = os.getenv("GOOGLE_API_KEY")
COMPOSIO_API_KEY = os.getenv("COMPOSIO_API_KEY")
COMPOSIO_USER_ID = os.getenv("COMPOSIO_USER_ID")

if not GOOGLE_API_KEY:
    raise ValueError("GOOGLE_API_KEY is not set in the environment.")
if not COMPOSIO_API_KEY:
    raise ValueError("COMPOSIO_API_KEY is not set in the environment.")
if not COMPOSIO_USER_ID:
    raise ValueError("COMPOSIO_USER_ID is not set in the environment.")

What's happening:

os reads environment variables
Composio is the main Composio SDK client
GoogleProvider declares that you are using Google ADK as the agent runtime
Agent is the Google ADK LLM agent class
McpToolset lets the ADK agent call MCP tools over HTTP

Create Composio client and Tool Router session

python

composio_client = Composio(api_key=COMPOSIO_API_KEY)

composio_session = composio_client.create(
    user_id=COMPOSIO_USER_ID,
    toolkits=["cloudsmith"],
)

COMPOSIO_MCP_URL = composio_session.mcp.url,
print(f"Composio MCP URL: {COMPOSIO_MCP_URL}")

What's happening:

Authenticates to Composio with your API key
Declares Google ADK as the provider
Spins up a short-lived MCP endpoint for your user and selected toolkit
Stores the MCP HTTP URL for the ADK MCP integration

Set up the McpToolset and create the Agent

python

composio_toolset = McpToolset(
    connection_params=StreamableHTTPConnectionParams(
        url=COMPOSIO_MCP_URL,
        headers={"x-api-key": COMPOSIO_API_KEY}
    )
)

root_agent = Agent(
    model="gemini-2.5-flash",
    name="composio_agent",
    description="An agent that uses Composio tools to perform actions.",
    instruction=(
        "You are a helpful assistant connected to Composio. "
        "You have the following tools available: "
        "COMPOSIO_SEARCH_TOOLS, COMPOSIO_MULTI_EXECUTE_TOOL, "
        "COMPOSIO_MANAGE_CONNECTIONS, COMPOSIO_REMOTE_BASH_TOOL, COMPOSIO_REMOTE_WORKBENCH. "
        "Use these tools to help users with Cloudsmith operations."
    ),
    tools=[composio_toolset],
)

print("\nAgent setup complete. You can now run this agent directly ;)")

What's happening:

Connects the ADK agent to the Composio MCP endpoint through McpToolset
Uses Gemini as the model powering the agent
Lists exact tool names in instruction to reduce misnamed tool calls

Run the agent

bash

# Run in CLI mode
adk run my_agent

# Or run in web UI mode
adk web

Execute the agent from the project root. The web command opens a web portal where you can chat with the agent.

What's happening:

adk run runs the agent in CLI mode
adk web . opens a web UI for interactive testing

Complete Code

Here's the complete code to get you started with Cloudsmith and Google ADK:

python

import os
import warnings

from composio import Composio
from composio_google import GoogleProvider
from dotenv import load_dotenv
from google.adk.agents.llm_agent import Agent
from google.adk.tools.mcp_tool.mcp_session_manager import StreamableHTTPConnectionParams
from google.adk.tools.mcp_tool.mcp_toolset import McpToolset

load_dotenv()
warnings.filterwarnings("ignore", message=".*BaseAuthenticatedTool.*")

GOOGLE_API_KEY = os.getenv("GOOGLE_API_KEY")
COMPOSIO_API_KEY = os.getenv("COMPOSIO_API_KEY")
COMPOSIO_USER_ID = os.getenv("COMPOSIO_USER_ID")

if not GOOGLE_API_KEY:
    raise ValueError("GOOGLE_API_KEY is not set in the environment.")
if not COMPOSIO_API_KEY:
    raise ValueError("COMPOSIO_API_KEY is not set in the environment.")
if not COMPOSIO_USER_ID:
    raise ValueError("COMPOSIO_USER_ID is not set in the environment.")

composio_client = Composio(api_key=COMPOSIO_API_KEY, provider=GoogleProvider())

composio_session = composio_client.create(
    user_id=COMPOSIO_USER_ID,
    toolkits=["cloudsmith"],
)

COMPOSIO_MCP_URL = composio_session.mcp.url


composio_toolset = McpToolset(
    connection_params=StreamableHTTPConnectionParams(
        url=COMPOSIO_MCP_URL,
        headers={"x-api-key": COMPOSIO_API_KEY}
    )
)

root_agent = Agent(
    model="gemini-2.5-flash",
    name="composio_agent",
    description="An agent that uses Composio tools to perform actions.",
    instruction=(
        "You are a helpful assistant connected to Composio. "
        "You have the following tools available: "
        "COMPOSIO_SEARCH_TOOLS, COMPOSIO_MULTI_EXECUTE_TOOL, "
        "COMPOSIO_MANAGE_CONNECTIONS, COMPOSIO_REMOTE_BASH_TOOL, COMPOSIO_REMOTE_WORKBENCH. "
        "Use these tools to help users with Cloudsmith operations."
    ),  
    tools=[composio_toolset],
)

print("\nAgent setup complete. You can now run this agent directly ;)")

Conclusion

You've successfully integrated Cloudsmith with the Google ADK through Composio's MCP Tool Router. Your agent can now interact with Cloudsmith using natural language commands.

Key takeaways:

The Tool Router approach dynamically routes requests to the appropriate Cloudsmith tools
Environment variables keep your credentials secure and separate from code
Clear agent instructions reduce tool calling errors
The ADK web UI provides an interactive interface for testing and development

You can extend this setup by adding more toolkits to the toolkits array in your session configuration.

TOOLS

Supported Tools

Every Cloudsmith action and event your agent gets out of the box.

Get Current User

Return the identity authenticated by the connected Cloudsmith API key.

Get Package

Get metadata, status, checksums, licensing, and security state for one package in a Cloudsmith repository.

Get Quota

Return current storage and bandwidth usage and allowances for a Cloudsmith namespace without inferring a billing plan name.

Get Rate Limits

Return Cloudsmith's current per-resource request limits, remaining counts, intervals, and throttling state for the authenticated principal.

Get Repository

Get configuration, visibility, usage, and capability details for one Cloudsmith repository without returning repository signing keys or certificates.

List Organizations

List Cloudsmith organizations associated with the authenticated principal so an agent can discover namespace slugs for later calls.

List Repository Vulnerabilities

List vulnerability scan summaries for packages in a Cloudsmith repository.

Search Audit Log

Search paginated audit events for a Cloudsmith namespace by event, actor, or timestamp text.

Search Packages

Search packages in a Cloudsmith repository by name, filename, version, distribution, architecture, format, or status.

Search Repositories

Search and list repositories within a Cloudsmith namespace, returning identifiers and summary state without repository signing keys.

FRAMEWORKS

How to build Cloudsmith MCP Agent with another framework

OpenAI Agents SDK

Use Cloudsmith MCP with OpenAI Agents SDK

Claude Agent SDK

Use Cloudsmith MCP with Claude Agent SDK

Claude Code

Use Cloudsmith MCP with Claude Code

Claude Cowork

Use Cloudsmith MCP with Claude Cowork

Codex

Use Cloudsmith MCP with Codex

OpenClaw

Use Cloudsmith MCP with OpenClaw

Hermes

Use Cloudsmith MCP with Hermes

CLI

Use Cloudsmith MCP with CLI

LangChain

Use Cloudsmith MCP with LangChain

Vercel AI SDK

Use Cloudsmith MCP with Vercel AI SDK

Mastra AI

Use Cloudsmith MCP with Mastra AI

LlamaIndex

Use Cloudsmith MCP with LlamaIndex

CrewAI

Use Cloudsmith MCP with CrewAI

MORE TOOLKITS

Explore Other Toolkits

Toolkit marketplace

1password

Api Key

1Password is a password manager and digital vault for storing logins, secrets, notes, and secure documents. It helps individuals and teams protect credentials, share access safely, and reduce password risk.

Authyo

Api Key

Authyo is a REST API service for passwordless authentication, OTP verification, session management, and transactional notifications. Use it to add secure login flows and user verification without building auth infrastructure from scratch.

Better stack

Api Key

Better Stack is a monitoring, logging, and incident management solution for apps and services. It helps teams ensure application reliability and performance with real-time insights.

Blazemeter

Basic

Blazemeter is a continuous testing platform for web and mobile app performance. It empowers teams to automate and analyze large-scale tests with ease.

FAQ

Frequently asked questions

With a standalone Cloudsmith MCP server, the agents and LLMs can only access a fixed set of Cloudsmith tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Cloudsmith and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Google ADK fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Cloudsmith tools.

Yes, absolutely. You can configure which Cloudsmith scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Cloudsmith data and credentials are handled as safely as possible.

Start with Cloudsmith.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Cloudsmith tool your agent needs.Free to start.

Start building

Customer stories

Teams ship real agents on Composio

GET STARTED FOR FREE BOOK A DEMO

Karan skipped his own birthday party to fix our critical issue. It was 10pm and he diverted his Waymo to help us instead. This really sets the bar — it shows the commitment you need when users rely on your software.

Harsha Gaddipati

Co-founder, Slashy

A lot of students tell us that the moment their connected tools start talking to each other inside Opennote feels almost magical. The agent just knows them, and it's immensely helped keep new users on the platform.

Abhi Arya

Co-founder, Opennote

We chose Composio over Pipedream because it delivered depth where it mattered — niche tools and tricky edge cases other platforms simply ignored. That gave us confidence to scale without compromising.

Nirman Dave

CEO, Zams

As a solo builder, shipping fast is life or death. The only way I can outcompete incumbents is by outmanoeuvring them. Getting bogged down managing agent auth would have been a death sentence.

Ryan Yu

Founder, Extra Thursday

Before Composio, adding tool integrations was slow and resource-intensive. Each one could take weeks of engineering time, and maintaining them meant constantly keeping up with API changes.

Tomisin Jenrola

Founder & CEO, SwarmZero

With hands-on help from their founder, we integrated Gmail and Google Drive in just 30 minutes. This level of personal support and commitment is exactly what startups should strive for.

Jerome Leclanche

Co-Founder, Ingram Technologies

How to integrate Cloudsmith MCP with Google ADK

Connect Cloudsmith without auth hassles

Introduction

Also integrate Cloudsmith with

TL;DR

What is Google ADK?

What is the Cloudsmith MCP server, and what's possible with it?

What is the Composio tool router, and how does it fit here?

What is Composio SDK?

How the Composio SDK works

Step-by-step Guide

Prerequisites

Getting API Keys for Google and Composio

Install dependencies

Set up ADK project

Set environment variables

Import modules and validate environment

Create Composio client and Tool Router session

Set up the McpToolset and create the Agent

Run the agent

Complete Code

Conclusion

Supported Tools

How to build Cloudsmith MCP Agent with another framework

OpenAI Agents SDK

Claude Agent SDK

Claude Code

Claude Cowork

Codex

OpenClaw

Hermes

CLI

LangChain

Vercel AI SDK

Mastra AI

LlamaIndex

CrewAI

Explore Other Toolkits

1password

Authyo

Better stack

Blazemeter

Frequently asked questions

What are the differences in Tool Router MCP and Cloudsmith MCP?+

Can I use Tool Router MCP with Google ADK?+

Can I manage the permissions and scopes for Cloudsmith while using Tool Router?+

How safe is my data with Composio Tool Router?+

Start with Cloudsmith.It takes 30 seconds.

Teams ship real agents on Composio