Skip to content
MarcommAI

Connect Marcomm to Gemini Enterprise

A Google Cloud administrator adds the Marcomm MCP server to Gemini Enterprise as a custom MCP server, so people can use Marcomm from Gemini with their own sign-in. Gemini CLI connects with an extension.

  1. 1
    In Google Cloud, make sure you have the Discovery Engine Editor role. Open your Gemini Enterprise app, go to Connected data stores, and add a Custom MCP server.
  2. 2
    Enter https://app.marcomm.works/api/mcp as MCP Server URL. Marcomm answers over Streamable HTTP, the only transport Gemini Enterprise accepts.
  3. 3
    Enter https://marcomm.works/oauth/authorize as Authorization URL (without parameters) and https://marcomm.works/api/oauth/token as Token URL.
  4. 4
    To get a Client ID, run this once in a terminal and copy client_id from the reply: curl -X POST https://marcomm.works/api/oauth/register -H "Content-Type: application/json" -d '{"client_name":"Gemini Enterprise","redirect_uris":["https://vertexaisearch.cloud.google.com/oauth-redirect"]}'
  5. 5
    Enter any text, such as unused, as Client Secret. Marcomm does not issue or check a secret; PKCE protects the sign-in instead.
  6. 6
    Enter read write as Scopes (read alone gives read-only access). Turn on both Enable PKCE Support and Use HTTP Basic Authentication.
  7. 7
    Add app.marcomm.works / marcomm.works to your agent egress allowlist and save. The first time someone uses a Marcomm tool, Gemini asks them to sign in to Marcomm, choose a workspace and select Allow.

Gemini CLI: run gemini extensions install https://github.com/alex-digitalog/marcomm-gemini-extension.

Each person acts as themselves, with the access their role in the workspace gives them, exactly as with Claude and ChatGPT. The workspace settings in Settings → AI tool connections apply to Gemini too.

For Gemini Enterprise, Marcomm accepts only the redirect address https://vertexaisearch.cloud.google.com/oauth-redirect. The Client ID has no secret, so PKCE is what protects the sign-in, and Marcomm refuses a request without it.

Marcomm always issues a refresh token, so offline_access is not needed. If you enter it, it is ignored.

FAQs

Do I need a Client Secret for Gemini Enterprise?
Gemini Enterprise requires the field, so enter any text such as unused. Marcomm does not issue or check a secret. PKCE, which must stay on, protects the sign-in.

AI tools