install

Additional install commands

macOS

Homebrewverified · 100%

brew install cloud-sql-proxy

local Homebrew formula metadata

Windows

Scoopverified · 92%

scoop install main/cloud-sql-proxy

Scoop official bucket manifest trees · bucket/cloud-sql-proxy.json · source: api.github.com

overview

Package summary

Utility for connecting securely to your Cloud SQL instances

Project links

Commands and aliases

cloud-sql-proxy

history

Project history and usage

Cloud SQL Auth Proxy is Google's CLI for making secure local or sidecar connections to Cloud SQL instances. It is historically important because it packages Google Cloud database connectivity, IAM authorization, and TLS handling into a standalone executable used across local development, VMs, containers, and Kubernetes-style deployments.

Project history

The GoogleCloudPlatform/cloud-sql-proxy repository was created in 2015 and remains the official upstream for the Cloud SQL Auth Proxy. The README describes it as a utility for secure Cloud SQL connections with IAM authorization and TLS 1.3 encryption, avoiding manual certificate management.

The v2 migration guide documents a major CLI evolution from the old `cloud_sql_proxy` executable to `cloud-sql-proxy`, with more explicit flags, environment-variable support, a new container image name, and changed connection behavior.

Adoption history

Official docs distribute platform-specific binaries through Google storage, document `go install`, and point to GitHub releases. The input package-manager facts show Homebrew and Scoop packaging, reflecting common workstation installation patterns.

The README positions language-specific Cloud SQL connectors for Go, Java, Python, and Node.js as alternatives when users prefer in-process connectivity, so the proxy sits beside a broader connector ecosystem rather than replacing it.

How it is used

Users run the proxy with one or more Cloud SQL instance connection names, optionally choosing TCP ports, Unix sockets, private IP behavior, IAM database authentication, metrics, health checks, service-account impersonation, or a credentials-file flag.

The proxy obtains credentials through Google Application Default Credentials by default, and can also take an OAuth token or service-account key file path supplied by the user.

Why package nerds care

For package nerds, Cloud SQL Auth Proxy is a classic cloud vendor CLI where binary naming, major-version migration, install channel, and authentication defaults all matter. The v1-to-v2 executable rename is exactly the sort of detail package formulas and scripts must track.

It is also significant because the same package has to serve developer laptops, CI jobs, VM agents, and container images while remaining aligned with Google Cloud IAM and Cloud SQL behavior.

Timeline

2015: GoogleCloudPlatform/cloud-sql-proxy GitHub repository metadata was created.
v2: Migration guide documents the rename from cloud_sql_proxy to cloud-sql-proxy and the new container image name.
v2.17.1: README records signed Windows binaries starting with this version.

Related projects

Cloud SQL Go, Java, Python, and Node.js connectors are official related projects named by the README.
Google Cloud SDK and Application Default Credentials provide the usual authentication environment.
The older v1 Cloud SQL proxy behavior is documented through the upstream migration guide.

Sources

security posture

Risk level: orange

broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

broad file, network, media, or database tool signal
infrastructure mutation or orchestration signal

Signals

text:cloud
text:sql

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`cloud-sql-proxy`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version2.23.0

manager updated2026-06-26

local dataok

upstreamcurrent

latest detectedv2.23.0

https://github.com/GoogleCloudPlatform/cloud-sql-proxy

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:cloud-sql-proxy
Version	2.23.0
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/cloud-sql-proxy
Homepage	https://github.com/GoogleCloudPlatform/cloud-sql-proxy
Repository	https://github.com/GoogleCloudPlatform/cloud-sql-proxy
Upstream docs	https://docs.cloud.google.com/sql/docs/postgres/sql-proxy
License	Apache-2.0
Source archive	https://github.com/GoogleCloudPlatform/cloud-sql-proxy/archive/refs/tags/v2.23.0.tar.gz
Last updated	2026-06-26T15:03:55Z
Pulse	updated
Build dependencies	go
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	cloud-sql-proxy
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Scoop95%

main/cloud-sql-proxy

scoop install main/cloud-sql-proxy

normalized package name match
Matched by: Cloud Sql Proxy

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/cloud-sql-proxy.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/cloud-sql-proxy.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install cloud-sql-proxy with Homebrew, scoop