Skip to content
BuildBase

Use BuildBase in Gemini CLI

Add BuildBase's MCP server to Gemini CLI with one command, sign in as yourself in the browser, and manage your organization from the terminal.

This page is part of BuildBase in your AI tools: it connects Gemini CLI to BuildBase's own MCP server so you can manage your BuildBase organization from the terminal. Gemini CLI signs in as you and never sees your organization's secrets.

Note

Want your own app to be agent-ready? See Let your users connect Gemini CLI to your app, in Agent-ready apps.

What you need

  • Gemini CLI on an account that can still use it. Google's docs say Gemini CLI was replaced by Antigravity CLI for unpaid and Google One users on 18 June 2026.
  • A local browser for the sign-in. Gemini CLI's OAuth sign-in does not work on a headless machine (with an API key is the way there).
  • A BuildBase console account, and an organization whose AI agents setting is not Off (choose what agents may do).

Add the server

From a terminal:

gemini mcp add --transport http buildbase-console https://api.console.buildbase.app/mcp

Or by hand in settings.json, with httpUrl:

{
  "mcpServers": {
    "buildbase-console": {
      "httpUrl": "https://api.console.buildbase.app/mcp"
    }
  }
}

In Gemini CLI, url means the older SSE transport, so a server added with url does not connect.

Sign in

The first time Gemini CLI connects, BuildBase answers that it needs a sign-in, and Gemini CLI finds the sign-in page from that answer and opens it in your browser.

  1. Sign in with your console account and your usual second step.
  2. Approve Gemini CLI on the consent screen. It asks for console:read and console:write to start.

To sign in again, for example to approve a new scope, run /mcp auth buildbase-console inside Gemini CLI (what an agent asks for).

What you see when you connect

Once you have signed in, BuildBase shows the consent screen in your browser. It names the tool, lists the scopes it asks for and the server the access is for, and changes nothing until you choose Allow access. Here it is for a tool that registered itself:

BuildBase's consent screen for a tool that registered itself, here Example Agent: a warning that the app gave itself its name and nobody has checked it, what it may do as you, console:read and offline_access, the access to use at https://api.console.buildbase.app/mcp, and Allow access and Deny ringed

Use it

Ask, for example:

  • "List my BuildBase organizations and what agents may do in each."
  • "Which environment variables does a Next.js app need for Acme?"
  • "Create a feature flag beta-dashboard, off, in staging."

More, with what each asks you to approve: example prompts.

What differs in Gemini CLI

  • Keep trust off. A server entry with "trust": true skips every tool confirmation. Leave it out for BuildBase, so Gemini CLI asks before each change.

  • Limit the tools. includeTools or excludeTools in the server entry choose which tools Gemini CLI loads, for example only the read tools:

    {
      "mcpServers": {
        "buildbase-console": {
          "httpUrl": "https://api.console.buildbase.app/mcp",
          "excludeTools": ["console_destructive_change", "blueprint_apply"]
        }
      }
    }
  • Approvals. When BuildBase needs your approval for a change, Gemini CLI shows it in the terminal where it can ask you questions; otherwise the agent states the change and confirms it with a one-time code (what stays with you).

On a headless machine

With no browser to sign in, use one of your organization's API keys as a header:

gemini mcp add --transport http --header "Authorization: Bearer $BUILDBASE_API_KEY" buildbase-console https://api.console.buildbase.app/mcp

The key works only in its own organization, within its role and the organization's AI agents setting (connect with an API key).

If something goes wrong

What you seeWhyWhat to do
The server never connectsIt was added with url, which Gemini CLI reads as SSEUse httpUrl, or add it again with --transport http
No browser opens for the sign-inThe machine has no local browserSign in on a machine with one, or use an API key header
Gemini CLI says the server needs authenticationThe sign-in was not finished or has endedRun /mcp auth buildbase-console
A change is refused for the organizationIts AI agents setting is Read only or OffAn owner or admin changes it under Security, AI agents
You cannot tell why a call failedGemini CLI's own output is shortStart it with --debug, and check /mcp list or gemini mcp list

To disconnect, remove the server from settings.json and disconnect the agent in BuildBase.

Frequently asked questions

Should I use httpUrl or url in settings.json?
Use httpUrl. In Gemini CLI, httpUrl means Streamable HTTP, which is what BuildBase's server speaks, while url means the older SSE transport.
Can I sign in on a server with no browser?
Not with Gemini CLI's own sign-in, which needs a local browser. On a headless machine, connect with an organization API key in a header instead.
Is Gemini CLI still available on my account?
Google's docs say unpaid and Google One users were moved to Antigravity CLI on 18 June 2026. If your account was moved, Gemini CLI is no longer the tool to use.