sigma gate for Gemini CLI

io.github.spektre-labs/sigma-gate

Deterministic trust gate for AI output: leaked-secret, prompt-injection & PII in one call.

client:Gemini CLI transport:streamable-http

Install sigma gate in Gemini CLI

~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json

{
  "mcpServers": {
    "sigma-gate": {
      "httpUrl": "https://sigma-gate-864996675261.us-central1.run.app/mcp"
    }
  }
}

Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs