ModelsAtlas
Explore
Atlas / MCP servers / andyshaman / Gemini WebAPI

Gemini WebAPICAUTION

mcp/andyshaman/gemini-webapi
MCP server by andyshaman · ai · claude · claude code · Audited 2026-10-08
⚑ Report / re-scanSource ↗

MCP server for Google Gemini — free image generation, editing & chat via browser cookies. No API keys needed.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
6 1r · 4w · 1d
Transport
—
License
AGPL-3.0
Stars
59
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

gemini-webapi-mcp

MCP-сервер для Google Gemini — генерация и редактирование изображений, чат и анализ файлов через браузерные cookies. Без API-ключей. Бесплатно.

Возможности

  • Генерация изображений по текстовому описанию (Nano Banana 2 с поддержкой пропорций)
  • 2x разрешение — автоматически скачивает upscaled-версию (2048x2048 → 2816x1536 и выше)
  • Редактирование изображений — отправьте картинку + промпт и получите изменённую версию
  • Анализ файлов — видео, изображения, PDF, документы
  • Текстовый чат с Gemini (Flash, Pro, Flash-Thinking)
  • Авто-удаление вотермарки — sparkle-метка Gemini убирается встроенным детерминированным Reverse Alpha Blending (без внешних бинарников, ML-моделей и скачиваний)
  • Авто-аутентификация через cookies из Chrome

Быстрый старт

1. Войдите в Gemini

Откройте Chrome, перейдите на [gemini.google.com](https:/

Read from source at commit b73e9a5dccf8OBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add gemini-webapi-mcp -- uvx gemini-webapi-mcp
claude-desktop
{
  "mcpServers": {
    "gemini-webapi-mcp": {
      "command": "uvx",
      "args": [
        "gemini-webapi-mcp"
      ]
    }
  }
}
03

Exposed tools (6)

1 read · 4 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
gemini_analyze_urlreadAnalyze a URL — YouTube videos, webpages, articles, etc.
gemini_chatwriteSend a text prompt to Google Gemini and get a response.
gemini_generate_imagewriteGenerate or edit images with Gemini.
gemini_resetdestructiveRe-initialise the Gemini client (refresh cookies, clear state).
gemini_start_chatwriteStart a new multi-turn chat session with Gemini.
gemini_upload_filewriteUpload a file (image, PDF, document, video) to Gemini and ask a question about it.
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (2 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (7)

MEDIUMInventory / provenance · inv.binary · CWE-1104
src/gemini_webapi_mcp/assets/wm_alpha_edit.npy
wm_alpha_edit.npy
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
src/gemini_webapi_mcp/assets/wm_alpha_txt.npy
wm_alpha_txt.npy
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
src/gemini_webapi_mcp/assets/wm_premult_edit.npy
wm_premult_edit.npy
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
src/gemini_webapi_mcp/assets/wm_premult_txt.npy
wm_premult_txt.npy
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMSupply chain · supply.git_dep · CWE-829, CWE-1357
pyproject.toml:28
"gemini-webapi @ git+https://github.com/xob0t/Gemini-API.git",
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
gemini_reset
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
INFOInventory / provenance · inv.oversize · CWE-1104
tests/fixtures/busy_corner_1280.png
tests/fixtures/busy_corner_1280.png
Why it matters. 3336033 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha b73e9a5dccf8full audit observations/trust-audit/mcp-server/andyshaman__gemini-webapi.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08b73e9a5dccf8CAUTIONB89first audit
06

Questions

What is the Gemini WebAPI MCP server?

MCP server for Google Gemini — free image generation, editing & chat via browser cookies. No API keys needed.

What tools does Gemini WebAPI expose?

6 in total: 1 read-only, 4 that write, and 1 that can delete or overwrite (gemini_reset). Every one is listed on this page with its risk.

Is Gemini WebAPI safe to connect to an agent?

With care. The audit graded it B (89/100) and found 7 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Gemini WebAPI need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (b73e9a5dccf8), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement