Descope built a private MCP server around BigQuery using Anthropic’s MCP Tunnels for network isolation and Descope authentication for granular access control. The solution lets customer support engineers query data through Claude while maintaining individual user credentials and role-based permissions, so customer data never touches the public internet.