Google Cloud Java Client Libraries

Java idiomatic client for Google Cloud Platform services.

Supported APIs

Libraries are available on GitHub and Maven Central for developing Java applications that interact with individual Google Cloud services:

Client Release Level Version
Asset Inventory GA Maven
Auto ML GA Maven
BigQuery GA Maven
BigQuery Data Transfer Service GA Maven
Bigtable GA Maven
Bigtable Hbase Client GA Maven
Billing GA Maven
Build GA Maven
Container Analysis GA Maven
Data Catalog GA Maven
Data Loss Prevention GA Maven
Dataproc GA Maven
Datastore GA Maven
Dialogflow API GA Maven
Firestore GA Maven
IAM Service Account Credentials API GA Maven
Internet of Things (IoT) Core GA Maven
Key Management Service GA Maven
Kubernetes Engine GA Maven
Natural Language GA Maven
OS Login GA Maven
Pub/Sub GA Maven
Recommender GA Maven
Redis GA Maven
Scheduler GA Maven
Secret Management GA Maven
Security Command Center GA Maven
Spanner GA Maven
Spanner JDBC GA Maven
Speech GA Maven
Stackdriver Logging GA Maven
Stackdriver Monitoring GA Maven
Stackdriver Trace GA Maven
Storage GA Maven
Tasks GA Maven
Text-to-Speech GA Maven
Translation GA Maven
Video Intelligence GA Maven
Vision GA Maven
Web Risk GA Maven
Access Approval Beta Maven
BigQuery Connection Beta Maven
BigQuery Reservation Beta Maven
BigQuery Storage Beta Maven
Billing Budgets Beta Maven
Data Labeling Beta Maven
Document AI Beta Maven
Identity Access Context Manager Beta Maven
Media Translation API Beta Maven
Memcache Beta Maven
Monitoring Dashboards Beta Maven
OS Config API Beta Maven
Organization Policy Beta Maven
Phishing Protection Beta Maven
Pub/Sub Lite Beta Maven
Recommendations AI Beta Maven
Security Command Center Settings API Beta Maven
Security Scanner Beta Maven
Service Directory Beta Maven
Shared Dependencies BOM Beta Maven
Stackdriver Error Reporting Beta Maven
Talent Solution Beta Maven
reCAPTCHA Enterprise Beta Maven
Compute Engine Alpha Maven
DNS Alpha Maven
Gaming Alpha Maven
Logging Logback Appender Alpha Maven
NIO Filesystem Provider for Storage Alpha Maven
Resource Manager API Alpha Maven
Stackdriver Incident Response & Management Alpha Maven

If the service is not listed, google-api-java-client interfaces with additional Google Cloud APIs using a legacy REST interface.

When building Java applications, preference should be given to the libraries listed in the table.

Specifying a Project ID

Most google-cloud libraries require a project ID. There are multiple ways to specify this project ID.

  1. When using google-cloud libraries from within Compute/App Engine, there's no need to specify a project ID. It is automatically inferred from the production environment.
  2. When using google-cloud elsewhere, you can do one of the following:

    • Supply the project ID when building the service options. For example, to use Datastore from a project with ID "PROJECT_ID", you can write:
    Datastore datastore = DatastoreOptions.newBuilder().setProjectId("PROJECT_ID").build().getService();
    • Specify the environment variable GOOGLE_CLOUD_PROJECT to be your desired project ID.
    • Set the project ID using the Google Cloud SDK. To use the SDK, download the SDK if you haven't already, and set the project ID from the command line. For example:
    gcloud config set project PROJECT_ID

google-cloud determines the project ID from the following sources in the listed order, stopping once it finds a value:

  1. The project ID supplied when building the service options
  2. Project ID specified by the environment variable GOOGLE_CLOUD_PROJECT
  3. The App Engine / Compute Engine project ID
  4. The project ID specified in the JSON credentials file pointed by the GOOGLE_APPLICATION_CREDENTIALS environment variable
  5. The Google Cloud SDK project ID

In cases where the library may expect a project ID explicitly, we provide a helper that can provide the inferred project ID:

     String projectId = ServiceOptions.getDefaultProjectId();


google-cloud-java uses to authenticate requests. google-auth-library-java supports a wide range of authentication types; see the project's README and javadoc for more details.

Google Cloud Platform environment

When using Google Cloud libraries from a Google Cloud Platform environment such as Compute Engine, Kubernetes Engine, or App Engine, no additional authentication steps are necessary.

For example:

Storage storage = StorageOptions.getDefaultInstance().getService();


CloudTasksClient cloudTasksClient = CloudTasksClient.create();

Other environments

Using a service account (recommended)

  1. Generate a JSON service account key.

  2. After downloading that key, you must do one of the following:

    • Define the environment variable GOOGLE_APPLICATION_CREDENTIALS to be the location of the key. For example:
      export GOOGLE_APPLICATION_CREDENTIALS=/path/to/my/key.json
    • Supply the JSON credentials file when building the service options. For example, this Storage object has the necessary permissions to interact with your Google Cloud Storage data:
      Storage storage = StorageOptions.newBuilder()
      .setCredentials(ServiceAccountCredentials.fromStream(new FileInputStream("/path/to/my/key.json")))

Local development/testing

If running locally for development/testing, you can use the Google Cloud SDK. Create Application Default Credentials with gcloud auth application-default login, and then google-cloud will automatically detect such credentials.

Existing OAuth2 access token

If you already have an OAuth2 access token, you can use it to authenticate (notice that in this case, the access token will not be automatically refreshed):

Credentials credentials = GoogleCredentials.create(new AccessToken(accessToken, expirationTime));
Storage storage = StorageOptions.newBuilder()


Credentials credentials = GoogleCredentials.create(new AccessToken(accessToken, expirationTime));
CloudTasksSettings cloudTasksSettings = CloudTasksSettings.newBuilder()
CloudTasksClient cloudTasksClient = CloudTasksClient.create(cloudTasksSettings);

Application Default Credentials

If no credentials are provided, google-cloud will attempt to detect them from the environment using GoogleCredentials.getApplicationDefault() which will search for Application Default Credentials in the following locations (in order):

  1. The credentials file pointed to by the GOOGLE_APPLICATION_CREDENTIALS environment variable
  2. Credentials provided by the Google Cloud SDK gcloud auth application-default login command
  3. Google App Engine built-in credentials
  4. Google Cloud Shell built-in credentials
  5. Google Compute Engine built-in credentials


To get help, follow the instructions in the Troubleshooting document.

Configuring a Proxy

HTTP Clients

For HTTP clients, a proxy can be configured by using http.proxyHost, https.proxyHost, and related system properties as documented by Java Networking and Proxies.

gRPC Clients

For gRPC clients, a proxy can be configured by using the GRPC_PROXY_EXP environment variable as documented by the gRPC release notes. Please note that gRPC proxy support is currently experimental.

For a more custom proxy, you will need supply a ProxyDetector to the ManagedChannelBuilder:

import io.grpc.HttpConnectProxiedSocketAddress;
import io.grpc.ManagedChannelBuilder;
import io.grpc.ProxiedSocketAddress;
import io.grpc.ProxyDetector;

import javax.annotation.Nullable;

public CloudTasksClient getService() throws IOException {
  TransportChannelProvider transportChannelProvider =
              new ApiFunction<ManagedChannelBuilder, ManagedChannelBuilder>() {
                public ManagedChannelBuilder apply(ManagedChannelBuilder managedChannelBuilder) {
                  return managedChannelBuilder.proxyDetector(
                      new ProxyDetector() {
                        public ProxiedSocketAddress proxyFor(SocketAddress socketAddress)
                            throws IOException {
                          return HttpConnectProxiedSocketAddress.newBuilder()
                              .setProxyAddress(new InetSocketAddress(PROXY_HOST, PROXY_PORT))
                              .setTargetAddress((InetSocketAddress) socketAddress)
  CloudTasksSettings cloudTasksSettings =
  return CloudTasksClient.create(cloudTasksSettings);

Java Versions

Java 7 or above is required for using the clients in this repository.

Supported Platforms

Clients in this repository use either HTTP or gRPC for the transport layer. All HTTP-based clients should work in all environments.

For clients that use gRPC, the supported platforms are constrained by the platforms that Forked Tomcat Native supports, which for architectures means only x86_64, and for operating systems means Mac OS X, Windows, and Linux. Additionally, gRPC constrains the use of platforms with threading restrictions.

Thus, the following are not supported:

The following environments should work (among others):


This library provides tools to help write tests for code that uses google-cloud services.

See TESTING to read more about using our testing helpers.


This library follows Semantic Versioning, with some additional qualifications:

  1. Components marked with @BetaApi or @Experimental are considered to be "0.x" features inside a "1.x" library. This means they can change between minor and patch releases in incompatible ways. These features should not be used by any library "B" that itself has consumers, unless the components of library B that use @BetaApi features are also marked with @BetaApi. Features marked as @BetaApi are on a path to eventually become "1.x" features with the marker removed.

    Special exception for google-cloud-java: google-cloud-java is allowed to depend on @BetaApi features in gax-java without declaring the consuming code @BetaApi, because gax-java and google-cloud-java move in step with each other. For this reason, gax-java should not be used independently of google-cloud-java.

  2. Components marked with @InternalApi are technically public, but only because of the limitations of Java's access modifiers. For the purposes of semver, they should be considered private.

  3. Interfaces marked with @InternalExtensionOnly are public, but should only be implemented by internal classes. For the purposes of semver, we reserve the right to add to these interfaces without default implementations (for Java 7).

Please note these clients are currently under active development. Any release versioned 0.x.y is subject to backwards incompatible changes at any time.


Libraries defined at a GA quality level are expected to be stable and all updates in the libraries are guaranteed to be backwards-compatible. Any backwards-incompatible changes will lead to the major version increment (1.x.y -> 2.0.0).


Libraries defined at a Beta quality level are expected to be mostly stable and we're working towards their release candidate. We will address issues and requests with a higher priority.


Libraries defined at an Alpha quality level are still a work-in-progress and are more likely to get backwards-incompatible updates. Additionally, it's possible for Alpha libraries to get deprecated and deleted before ever being promoted to Beta or GA.

IDE Plugins

If you're using IntelliJ or Eclipse, you can add client libraries to your project using these IDE plugins:

Besides adding client libraries, the plugins provide additional functionality, such as service account key management. Refer to the documentation for each plugin for more details.

These client libraries can be used on App Engine standard for Java 8 runtime and App Engine flexible (including the Compat runtime). Most of the libraries do not work on the App Engine standard for Java 7 runtime. However, Datastore, Storage, and Bigquery should work.


Contributions to this library are always welcome and highly encouraged.

See google-cloud's CONTRIBUTING documentation and the shared documentation for more information on how to get started.

Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms. See Code of Conduct for more information.


Apache 2.0 - See LICENSE for more information.