Is Gemini Cli safe to use?

Gemini Cli has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Gemini Cli?

Gemini Cli supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Gemini Cli do?

Gemini Cli provides 8 tools: Scalable, Integration, License, Security, Preview and 3 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Gemini Cli?

Gemini Cli is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is Gemini Cli actively maintained?

Gemini Cli is actively maintained — last commit was 1 day ago. It has 105,612 GitHub stars.

Gemini Cli

Name: Gemini Cli
Author: google-gemini

Official

@google/gemini-cli · by google-gemini

An open-source AI agent that brings the power of Gemini directly into your terminal.

105.6k 471.5k/wk 8 tools GitHub npm

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio

8 tools · ~257 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

AI / ML Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gemini-cli": {
      "args": [
        "-y",
        "@google/gemini-cli"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/gemini-cli)](https://mcppedia.org/s/gemini-cli)

Read me

What Gemini Cli does

Google's AI coding assistant for the terminal. Not an MCP server itself — it is an AI client that can connect TO MCP servers. Supports Gemini models with a 1M token context window.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@google/gemini-cli' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

90/100across 5 weighted dimensions

How we score →

0255075100

−10

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

GHSA-wpqr-6v78-jr5gcritical · fixedCVSS 10

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

# Summary Gemini CLI (`@google/gemini-cli`) and the `run-gemini-cli` GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive (headless) environments handle folder trust, which may impact existing CI/CD workflows under specific conditions. # Details Folder Trust in Headless Mode In previous versions, Gemini CLI running in CI environmen

Affected: >= 0Fixed in 0.39.1source →

Inventory

Tools (8)

Click any tool to inspect its schema.

~257 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Gemini Cli safe to use?: Gemini Cli has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Gemini Cli?: Gemini Cli supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Gemini Cli do?: Gemini Cli provides 8 tools: Scalable, Integration, License, Security, Preview and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Gemini Cli?: Gemini Cli is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Gemini Cli actively maintained?: Gemini Cli is actively maintained — last commit was 1 day ago. It has 105,612 GitHub stars.

Similar servers

Others in ai-ml / developer-tools

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

58.2k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

MCP Security Weekly

Get CVE alerts and security updates for Gemini Cli and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gemini-cli": {
      "args": [
        "-y",
        "@google/gemini-cli"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/gemini-cli)](https://mcppedia.org/s/gemini-cli)

Read me

What Gemini Cli does

Google's AI coding assistant for the terminal. Not an MCP server itself — it is an AI client that can connect TO MCP servers. Supports Gemini models with a 1M token context window.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@google/gemini-cli' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Gemini CLI

Gemini CLI is an open-source AI agent that brings the power of Gemini directly into your terminal. It provides lightweight access to Gemini, giving you the most direct path from your prompt to our model.

Learn all about Gemini CLI in our documentation.

🚀 Why Gemini CLI?

🎯 Free tier: 60 requests/min and 1,000 requests/day with personal Google account.
🧠 Powerful Gemini 3 models: Access to improved reasoning and 1M token context window.
🔧 Built-in tools: Google Search grounding, file operations, shell commands, web fetching.
🔌 Extensible: MCP (Model Context Protocol) support for custom integrations.
💻 Terminal-first: Designed for developers who live in the command line.
🛡️ Open source: Apache 2.0 licensed.

📦 Installation

See Gemini CLI installation, execution, and releases for recommended system specifications and a detailed installation guide.

Quick Install

Run instantly with npx

# Using npx (no installation required)
npx @google/gemini-cli

Install globally with npm

npm install -g @google/gemini-cli

Install globally with Homebrew (macOS/Linux)

brew install gemini-cli

Install globally with MacPorts (macOS)

sudo port install gemini-cli

Install with Anaconda (for restricted environments)

# Create and activate a new environment
conda create -y -n gemini_env -c conda-forge nodejs
conda activate gemini_env

# Install Gemini CLI globally via npm (inside the environment)
npm install -g @google/gemini-cli

Release Channels

See Releases for more details.

Preview

New preview releases will be published each week at UTC 23:59 on Tuesdays. These releases will not have been fully vetted and may contain regressions or other outstanding issues. Please help us test and install with preview tag.

npm install -g @google/gemini-cli@preview

Stable

New stable releases will be published each week at UTC 20:00 on Tuesdays, this will be the full promotion of last week's preview release + any bug fixes and validations. Use latest tag.

npm install -g @google/gemini-cli@latest

Nightly

New releases will be published each day at UTC 00:00. This will be all changes from the main branch as represented at time of release. It should be assumed there are pending validations and issues. Use nightly tag.

npm install -g @google/gemini-cli@nightly

📋 Key Features

Code Understanding & Generation

Query and edit large codebases
Generate new apps from PDFs, images, or sketches using multimodal capabilities
Debug issues and troubleshoot with natural language

Automation & Integration

Automate operational tasks like querying pull requests or handling complex rebases
Use MCP servers to connect new capabilities, including [media generation with Imagen, Veo or Lyria](https://gi

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

90/100across 5 weighted dimensions

How we score →

0255075100

−10

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

GHSA-wpqr-6v78-jr5gcritical · fixedCVSS 10

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Affected: >= 0Fixed in 0.39.1source →

Inventory

Tools (8)

Click any tool to inspect its schema.

~257 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Gemini Cli safe to use?: Gemini Cli has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Gemini Cli?: Gemini Cli supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Gemini Cli do?: Gemini Cli provides 8 tools: Scalable, Integration, License, Security, Preview and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Gemini Cli?: Gemini Cli is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Gemini Cli actively maintained?: Gemini Cli is actively maintained — last commit was 1 day ago. It has 105,612 GitHub stars.