MCP server that enables AI assistants to interact with Google Gemini CLI, leveraging Gemini's massive token window for large file analysis and codebase understanding
MCPpedia last refreshed this data
Gemini MCP Tool is an MCP server that MCP server that enables AI assistants to interact with Google Gemini CLI, leveraging Gemini's massive token window for large file analysis and codebase understanding. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 91/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"gemini-cli": {
"args": [
"-y",
"gemini-mcp-tool"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
📚 View Full Documentation - Search me!, Examples, FAQ, Troubleshooting, Best Practices
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Five weighted categories — click any category to see the underlying evidence.
gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)
Untrusted prompt input could reach the Gemini CLI @file parser, allowing read/exfiltration of arbitrary local files (@/etc/passwd, @~/.ssh/id_rsa, @../../secret). On Windows, unquoted cmd.exe metacharacters could break out into OS command injection. Fix (1.1.6): removed the broken shell:false double-quote wrapping; added assertSafeFileReferences() to contain @file refs to the working directory; hardened Windows cmd.exe argument quoting.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml / developer-tools
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
MCP Security Weekly
Get CVE alerts and security updates for Gemini Mcp Tool and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
📚 View Full Documentation - Search me!, Examples, FAQ, Troubleshooting, Best Practices
This is a simple Model Context Protocol (MCP) server that allows AI assistants to interact with the Gemini CLI. It enables the AI to leverage the power of Gemini's massive token window for large analysis, especially with large files and codebases using the @ syntax for direction.
Goal: Use Gemini's powerful analysis capabilities directly in Claude Code to save tokens and analyze large files.
On 2026-06-18, Google retired the Gemini CLI for free, Google AI Pro, and Google AI Ultra users (and individual Gemini Code Assist / GitHub-org users). Its successor is the Antigravity CLI (agy). See Google's announcement.
From 2026-06-18 this tool selects the agy backend automatically. If you are on an affected tier, just install agy:
curl -fsSL https://antigravity.google/cli/install.sh | bash # macOS / Linux
Then run agy once to sign in. Nothing else to change.
Enterprise / Standard-license or paid-API-key user? Your Gemini CLI access is unaffected by the retirement. To keep using it, set one env var on the MCP server:
GEMINI_MCP_BACKEND=gemini
| Variable | Purpose |
|---|---|
GEMINI_MCP_BACKEND | gemini or agy/antigravity. Unset uses the date-aware default (agy from 2026-06-18). |
AGY_CLI_PATH | Full path to the agy binary if it isn't on the server's PATH. |
GEMINI_MCP_TIMEOUT | Overall CLI run timeout in minutes (default 45). |
The agy backend is experimental: print mode is Gemini 3.5 Flash-only, replies come from agy's stdout (transcript recovery only as a fallback), and tool execution isn't sandboxed in -p. The tool emits a notice when a requested model/sandbox can't be honored, and surfaces agy's own errors (quota, auth) verbatim. Full analysis: docs/migration/antigravity-cli.md.
Before using this tool, ensure you have:
claude mcp add gemini-cli -- npx -y gemini-mcp-tool
Use -- y instead of -y:
claude mcp add gemini-cli -- npx -- y gemini-mcp-tool
Type /mcp inside Claude Cod