Back to Home
holocode-ai icon

gemini-mcp

Verified Safe

by holocode-ai

Overview

The server provides a Model Context Protocol (MCP) interface to Google Gemini AI services, enabling multimodal generation including image creation, image editing, and video production.

Installation

Run Command
GOOGLE_API_KEY="your_google_api_key_here" docker-compose up -d

Environment Variables

  • GOOGLE_API_KEY
  • GOOGLE_PROJECT_ID
  • GOOGLE_LOCATION
  • OUTPUT_DIR
  • TRANSPORT
  • PORT
  • SERVICE_TOKENS
  • S3_ENDPOINT
  • S3_BUCKET
  • S3_REGION
  • S3_ACCESS_KEY_ID
  • S3_SECRET_ACCESS_KEY
  • S3_USE_SSL
  • S3_PRESIGN_TTL
  • S3_OBJECT_TTL
  • S3_CLEANUP_INTERVAL

Security Notes

The server demonstrates good security practices by using environment variables for sensitive API keys and S3 credentials. HTTP mode includes configurable Bearer token authentication, with explicit warnings logged if authentication is disabled. The file upload mechanism for local files ('upload_media' CLI via HTTP) uses secure, one-time use tokens generated with `crypto/rand`, which prevents replay attacks. Input path resolution for image/video tools correctly handles S3 object keys by downloading to temporary files (with cleanup) or verifies absolute local paths, mitigating direct path traversal vulnerabilities. No use of `eval` or similar dangerous dynamic code execution patterns was found.

Similar Servers

Stats

Interest Score21
Security Score9
Cost ClassHigh
Avg Tokens25000
Stars3
Forks0
Last Update2025-12-29

Tags

Multimodal AIGoogle GeminiImage GenerationVideo GenerationMCP Server