resource "google_project_iam_member" "mcp_tool_user" {
  for_each = toset(var.mcp_users)

  project = var.project_id
  role    = "roles/mcp.toolUser"
  member  = each.value
}