mcp-armor for Gemini CLI
io.studiomeyer/armor
Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.
client:Gemini CLI
transport:stdio
runtime:oci
Install mcp-armor in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"armor": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/studiomeyer-io/mcp-armor:0.8.1"
]
}
}
}
Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs