StackTether Support
Menu
All support topics

Connect Gemini Enterprise to StackTether

Short answer: Gemini Enterprise cannot register itself, so an admin of your MSP turns on Gemini Enterprise under AI access, clicks Create credentials and types a fresh 2FA code. StackTether shows a client ID and secret once. Your Google admin then adds a custom MCP server in Gemini Enterprise with the connector address https://app.stacktether.com/api/mcp, that client ID and secret, and StackTether's authorization and token addresses. Each person then signs in and approves on StackTether's consent page.

What you need

  • Gemini Enterprise, with custom MCP servers allowed by your Google Cloud organization policy. Google offers custom MCP data stores as a preview feature.
  • A StackTether admin (to create the credentials) and a Google admin (to add the server).

Step 1: create credentials in StackTether (MSP admin)

  1. Open AI access. Under Cloud apps, click Turn on for Gemini Enterprise.
  2. Under its switch, click Create credentials and enter a 6-digit code from your authenticator app.
  3. Copy the Client ID and Client secret with Copy client ID and Copy client secret. Store the secret straight into Gemini's settings or your password manager: it won't be shown again and StackTether does not keep it.
  4. Click I stored it, hide it.

These credentials work only for members of your MSP. Every admin of your MSP is emailed when they are created, regenerated or deleted.

Step 2: add the MCP server in Gemini Enterprise (Google admin)

  1. In Gemini Enterprise, add a custom MCP server (data store).
  2. Enter the server URL https://app.stacktether.com/api/mcp.
  3. Choose OAuth (authorization code) and enter the client ID and secret from step 1.
  4. For the authorization URL and token URL, use the authorization_endpoint and token_endpoint of StackTether's authorization server. You can read its address from https://app.stacktether.com/.well-known/oauth-protected-resource (the authorization_servers entry); its metadata lists both URLs.
  5. Gemini's redirect address is fixed (https://vertexaisearch.cloud.google.com/oauth-redirect); StackTether's credentials are made for exactly that address.

Step 3: each person connects

  1. When Gemini asks to connect, a StackTether page opens. Sign in with password and 2FA.
  2. On Connect Gemini Enterprise to StackTether?, click Approve.

Regenerate or delete

  • Regenerate makes a new ID and secret; the old ones stop at once. Update Gemini with the new ones.
  • Delete removes them; connections that used them stop working.
  • Turning Gemini Enterprise off on AI access deletes the credentials too.
  • Credentials can be created or regenerated 5 times a day per MSP.

FAQ

"This AI app was set up with client credentials made for another MSP."

The Gemini setup uses credentials from a different StackTether MSP. Create your own under AI access and update Gemini.

"Turn the app on for your MSP first, then create its credentials."

Switch on Gemini Enterprise first, then click Create credentials.