> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Gemini CLI
> Connect StackOne MCP to the Google Gemini CLI with OAuth.
## Overview
The [Gemini CLI](https://github.com/google-gemini/gemini-cli) is Google's open-source command-line agent. It connects to MCP servers defined in its settings and discovers OAuth on a remote server on its own.
## Prerequisites
* A StackOne [project](/gateway/concepts/organizations-and-projects) you are a member of.
* A [connector profile](/gateway/concepts/connector-profiles) in the project for each provider the client should reach, with the actions you want exposed enabled.
* (Optional) A [linked account](/gateway/concepts/linked-accounts) for each provider. Accounts can also be linked during the consent flow.
## Setup
```bash theme={null}
gemini mcp add --transport http stackone https://mcp.stackone.com/mcp
```
Or add it to `~/.gemini/settings.json` under `mcpServers` by hand:
```json theme={null}
{
"mcpServers": {
"stackone": {
"httpUrl": "https://mcp.stackone.com/mcp"
}
}
}
```
Run `gemini`. The CLI discovers that StackOne uses OAuth and opens your browser. If it does not, authenticate from inside the session:
```text theme={null}
/mcp auth stackone
```
Sign in, pick the project and the [linked accounts](/gateway/concepts/linked-accounts) the connector should reach, then **Authorize**.
1. **Sign in to StackOne.** If you are already signed in to the dashboard you skip straight to the next step.
2. **Select a project.** Select the project you would like to associate the connection with.
3. **Select accounts and actions.** Existing linked accounts are shown. New accounts can be linked by clicking **+ Link Account**. You can either select the whole account (all actions will be granted) or refine by toggling individual actions.
4. **(Optional) Load tools when needed.** On by default, and the toggle that puts the connection into [Advanced Tool Search](/optimize/advanced-tool-search). Leave it on for large action sets. Turn it off to hand the agent every selected action up front.
5. **Authorize.** Completes the connection; you can return to your client.
If you see a sentence where the **Load tools when needed** toggle should be, an admin has already settled it for the whole project. See [project settings](/optimize/advanced-tool-search#setting-it-for-a-whole-project).
Run `/mcp` to list connected servers and their tools.
To change which accounts or actions the CLI can reach, re-run the flow with `/mcp auth stackone`. To revoke it, use **Connected Apps** in the StackOne dashboard.
A session token URL carries its own credential, so it covers the cases OAuth can't: a shared server, a scheduled job, or anywhere nobody is present to approve a consent screen.
Generate one from **Connectors**, open a connector, then **Use in Agent**. Pick a linked account, set the expiry (one year by default), and copy the URL:
```
https://api.stackone.com/mcp?token={session_token}
```
One URL covers one linked account, and anyone holding it has that access until it expires, so treat it like a password. See [Choosing a connection method](/connect/ai-platforms/overview#choosing-a-connection-method) for the comparison with OAuth.
There is no consent screen to set [Advanced Tool Search](/optimize/advanced-tool-search) on, so add the `tool-mode` query parameter instead:
```
https://api.stackone.com/mcp?token={session_token}&tool-mode=search_execute
```
Put the token URL in `httpUrl`:
```json theme={null}
{
"mcpServers": {
"stackone": {
"httpUrl": "https://api.stackone.com/mcp?token={session_token}"
}
}
}
```
For API-key auth instead, see [Authentication & Security](/embed/call-actions/mcp#calling-actions).
Confirm the latest config format in the [Gemini CLI MCP docs](https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md).
## Optimize and secure
With your agent connected, use StackOne's platform features to optimize performance and secure every call.
Reduce context and save tokens.
Search synced records for a fraction of the tokens.
Block prompt injections before they reach your agent.