A secure MCP server that wraps the Google Gemini CLI, allowing clients to query Gemini models using local OAuth sessions without requiring an API key. It provides tools for model interaction and diagnostics with built-in protection against command injection
Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.
Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.
Version 1.0.2 declares 1 executable entrypoint.
npm install --save-exact @xjoker/gemini-cli-mcp@1.0.2npx -y -p @xjoker/gemini-cli-mcp@1.0.2 @xjoker/gemini-cli-mcp{
"mcpServers": {
"@xjoker/gemini-cli-mcp": {
"command": "npx",
"args": [
"-y",
"-p",
"@xjoker/gemini-cli-mcp@1.0.2",
"@xjoker/gemini-cli-mcp"
]
}
}
}| Canonical slug | gemini-cli-mcp-90c5fe4c | Deployment | Local Only |
|---|---|---|---|
| Canonical package | npm:@xjoker/gemini-cli-mcp | Repository | xjoker/gemini-cli-mcp |
| First published | — | Latest release | — |
| Last security verification | — | Classification confidence | 90% |
| Publication | Draft | Official distribution | Not verified |
| Channel | Identifier | Current version | Versions | Source |
|---|---|---|---|---|
| npm | @xjoker/gemini-cli-mcp | 1.0.2 | 1 | Repository |
| Package | Version | Published / observed | Inventory | Security scan |
|---|---|---|---|---|
| npm@xjoker/gemini-cli-mcp | 1.0.2Current | Sep 5, 2026 | 2 toolsSucceeded · 0 resources · 0 prompts | Evidence restricted |
Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.
No public current-version evidence is available yet.
| Tool | Category | Annotations | Risk |
|---|---|---|---|
gemini_infoGemini CLI diagnostics: check connectivity, get version, list sessions or extensions.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"action": {
"type": "string",
"enum": [
"ping",
"version",
"list_models",
"list_sessions",
"list_extensions"
],
"description": "ping: test CLI works, version: CLI version, list_models: available models and aliases, list_sessions: past sessions, list_extensions: available extensions."
}
},
"required": [
"action"
]
} | — | — | |
gemini_querySend a prompt to Google Gemini via locally authenticated CLI. Supports all Gemini models. Use @path to reference local files. Options: sandbox mode, yolo (auto-approve), approval modes, extra directories.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"prompt": {
"type": "string",
"minLength": 1,
"description": "Prompt for Gemini. Use @file.ts to include file context."
},
"model": {
"description": "Model name (e.g. gemini-2.5-pro, gemini-2.5-flash, gemini-2.5-flash-lite). Default: gemini-2.5-flash",
"type": "string"
},
"sandbox": {
"description": "Run in sandbox mode for safe code execution.",
"type": "boolean"
},
"yolo": {
"description": "Auto-approve all tool actions (no confirmation prompts).",
"type": "boolean"
},
"approval_mode": {
"description": "Approval mode: default (prompt), auto_edit (auto-approve edits), yolo (auto-approve all), plan (read-only).",
"type": "string",
"enum": [
"default",
"auto_edit",
"yolo",
"plan"
]
},
"include_stats": {
"description": "Include token usage stats in the response.",
"type": "boolean"
},
"include_directories": {
"description": "Additional directories to include in Gemini's workspace.",
"type": "array",
"items": {
"type": "string"
}
},
"cwd": {
"description": "Working directory for file references (@ syntax).",
"type": "string"
}
},
"required": [
"prompt"
]
} | — | — |
| Endpoint | Transport | Authentication | Health | Observed |
|---|---|---|---|---|
| No verified remote endpoint is linked. | ||||
Install the selected package version with: npm install --save-exact @xjoker/gemini-cli-mcp@1.0.2
gemini-cli-mcp Server exposed 2 tools during independent protocol observation, including gemini_info, gemini_query.
The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.
These internal links are derived from strong identity fields such as the implementation name, package, repository, vendor, and listing name—not generic description prose.
Association is based on retained identity fields; it does not by itself prove first-party publication.
Curated product and capability guides containing this catalog record.