Back to Home
chew-z icon

GeminiMCP

Verified Safe

by chew-z

Overview

Integrate Google's Gemini API for AI-powered tasks and search with Model Control Protocol (MCP) clients, focusing on developer-centric features like code analysis and context handling.

Installation

Run Command
./bin/mcp-gemini

Environment Variables

  • GEMINI_API_KEY

Security Notes

The server handles API keys and JWT secrets via environment variables. Local file access via `file_paths` is restricted to `stdio` transport and includes robust path traversal and symlink checks. CORS defaults to `*` for HTTP transport, which is a production security risk, but this is explicitly warned about in the README with clear configuration instructions. JWT authentication for HTTP is implemented, though the `GEMINI_AUTH_SECRET_KEY` length is only warned about (not enforced as an error) if less than 32 characters, which is a minor weakness. Input to prompts (e.g., `problem_statement`) is HTML-escaped to prevent prompt injection into the generated instructions. No 'eval' or direct malicious code patterns were found.

Similar Servers

Stats

Interest Score16
Security Score8
Cost ClassMedium
Avg Tokens50000
Stars3
Forks0
Last Update2025-12-23

Tags

Gemini APIMCPGoAIDeveloper Tools