# Install cloud-sql-proxy with Homebrew, scoop Utility for connecting securely to your Cloud SQL instances. Version 2.23.0 via Homebrew; verified 2026-06-26. ## Install ```sh sudo av install brew:cloud-sql-proxy ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install cloud-sql-proxy ``` Evidence: local Homebrew formula metadata ### Windows - Scoop (92%): ```sh scoop install main/cloud-sql-proxy ``` Evidence: Scoop official bucket manifest trees: bucket/cloud-sql-proxy.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:cloud-sql-proxy - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.23.0 - **Source summary:** Utility for connecting securely to your Cloud SQL instances - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-26T15:03:55Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - cloud-sql-proxy (cli) - cloud-sql-proxy (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.23.0 - Package-manager updated: 2026-06-26 - Local data: ok - Upstream repository: https://github.com/GoogleCloudPlatform/cloud-sql-proxy - Upstream latest detected: v2.23.0 (current) ## Project history and usage Cloud SQL Auth Proxy is Google's CLI for making secure local or sidecar connections to Cloud SQL instances. It is historically important because it packages Google Cloud database connectivity, IAM authorization, and TLS handling into a standalone executable used across local development, VMs, containers, and Kubernetes-style deployments. ### Project history The GoogleCloudPlatform/cloud-sql-proxy repository was created in 2015 and remains the official upstream for the Cloud SQL Auth Proxy. The README describes it as a utility for secure Cloud SQL connections with IAM authorization and TLS 1.3 encryption, avoiding manual certificate management. The v2 migration guide documents a major CLI evolution from the old `cloud_sql_proxy` executable to `cloud-sql-proxy`, with more explicit flags, environment-variable support, a new container image name, and changed connection behavior. ### Adoption history Official docs distribute platform-specific binaries through Google storage, document `go install`, and point to GitHub releases. The input package-manager facts show Homebrew and Scoop packaging, reflecting common workstation installation patterns. The README positions language-specific Cloud SQL connectors for Go, Java, Python, and Node.js as alternatives when users prefer in-process connectivity, so the proxy sits beside a broader connector ecosystem rather than replacing it. ### How it is used Users run the proxy with one or more Cloud SQL instance connection names, optionally choosing TCP ports, Unix sockets, private IP behavior, IAM database authentication, metrics, health checks, service-account impersonation, or a credentials-file flag. The proxy obtains credentials through Google Application Default Credentials by default, and can also take an OAuth token or service-account key file path supplied by the user. ### Why package nerds care For package nerds, Cloud SQL Auth Proxy is a classic cloud vendor CLI where binary naming, major-version migration, install channel, and authentication defaults all matter. The v1-to-v2 executable rename is exactly the sort of detail package formulas and scripts must track. It is also significant because the same package has to serve developer laptops, CI jobs, VM agents, and container images while remaining aligned with Google Cloud IAM and Cloud SQL behavior. ### Timeline - 2015: GoogleCloudPlatform/cloud-sql-proxy GitHub repository metadata was created. - v2: Migration guide documents the rename from cloud_sql_proxy to cloud-sql-proxy and the new container image name. - v2.17.1: README records signed Windows binaries starting with this version. ### Related projects - Cloud SQL Go, Java, Python, and Node.js connectors are official related projects named by the README. - Google Cloud SDK and Application Default Credentials provide the usual authentication environment. - The older v1 Cloud SQL proxy behavior is documented through the upstream migration guide. ### Sources - - - ## Security Notes broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - infrastructure mutation or orchestration signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cloud-sql-proxy - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Scoop - main/cloud-sql-proxy: normalized package name match | Scoop official bucket manifest trees: bucket/cloud-sql-proxy.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [pscale](https://www.automicvault.com/pkg/brew/pscale/) - Shares av.db curated category or tags: cli, cloud-infrastructure, database. - [gcsfuse](https://www.automicvault.com/pkg/brew/gcsfuse/) - Shares av.db curated category or tags: cli, cloud-infrastructure, google-cloud. - [terracognita](https://www.automicvault.com/pkg/brew/terracognita/) - Shares av.db curated category or tags: cli, cloud-infrastructure, google-cloud. - [actions-batch](https://www.automicvault.com/pkg/brew/actions-batch/) - Shares av.db curated category or tags: cli, cloud-infrastructure. - [aiac](https://www.automicvault.com/pkg/brew/aiac/) - Shares av.db curated category or tags: cli, cloud-infrastructure. - [aiven-client](https://www.automicvault.com/pkg/brew/aiven-client/) - Shares av.db curated category or tags: cli, cloud-infrastructure, database. - [akamai](https://www.automicvault.com/pkg/brew/akamai/) - Shares av.db curated category or tags: cli, cloud-infrastructure. - [aliyun-cli](https://www.automicvault.com/pkg/brew/aliyun-cli/) - Shares av.db curated category or tags: cli, cloud-infrastructure. - [aws-es-proxy](https://www.automicvault.com/pkg/brew/aws-es-proxy/) - Local package facts share a topical domain. Shared terms: cli, cloud, cloud-infrastructure, infrastructure, proxy. ## Combined YAML source View the package source record on GitHub. [combined/cloud-sql-proxy.yml](https://github.com/automic-vault/db/blob/main/combined/cloud-sql-proxy.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph