# Connect Gemini Enterprise

> Create a Gemini Enterprise app in Google Cloud, add Stensul as an MCP data store with OAuth and PKCE, add your users, and sign in.

Source: https://stensul.com/developers/quickstart/gemini/ · Last reviewed 2026-10-14

> **Not the Stensul admin?**
>
> Your **instance name** is the first part of your Stensul address (`northwind` in `northwind.stensul.com`). The [config generator](https://stensul.com/developers/config/?host=gemini) writes the exact settings and a message you can send your Stensul admin. Don't know who that is, or whether the MCP is turned on for your company? Ask your Stensul customer success manager, or email [help@stensul.com](mailto:help@stensul.com?subject=Stensul%20MCP%20access) from your work address.

Gemini works differently from other hosts. You don't add a connector inside the Gemini app: a Google Cloud (GCP) admin creates a **Gemini Enterprise app** in Google Cloud, adds Stensul to it as an MCP server, and gives people access. They then use Gemini, connected to Stensul, from that app's link.

> **Gemini Enterprise Business: not supported today**
>
> Google offers custom MCP connectors in Gemini Enterprise Business as a beta. Google Support has confirmed to Stensul that this beta isn't working properly yet, so a Gemini Enterprise app is the only way to use the Stensul MCP from Gemini today.

## Before you start

| Who | What they need |
| --- | --- |
| Stensul admin | Admin access, the external API enabled, and the `access_admin_api_connections` permission (ask your customer success manager). |
| GCP admin | A Google Cloud project where they can enable the Gemini Enterprise app product, create apps and manage IAM roles. A **Gemini Enterprise Plus license** is required for the MCP to work as expected. The product isn't free and adds to your Google Cloud costs. |
| Everyone else | A Stensul login, and access to the Gemini Enterprise app (step 4). |

## 1. Create the API connection in Stensul

1. Go to **Admin > Settings > API connections** and click **Add connection**.
2. Set **Authorization Type** to **Authorization Code**. Name it, for example `mcp-gemini`.
3. Add the redirect URI: `https://mcp.stensul.com/<your-instance>/oauth/callback`
4. Enable **PKCE (Public)**.
5. Select the scopes your team needs. The first four cover drafting. The last three turn on the image gallery and audience versions; a tool whose scope is missing returns a 403. See [scopes](https://stensul.com/developers/authentication/#scopes).
   - `libraries:read`: read libraries
   - `emails:read`: read emails
   - `emails:write`: write emails
   - `images:write`: upload images (labeled **Write images**)
   - `dam:read`: browse the image gallery (labeled **Read Dam images**)
   - `dynamic-content:read`: read segment sets
   - `dynamic-content:write`: apply segment sets and write segment content

   The list shows other scopes too, such as `capabilities:read`, `modules:write`, `users:read` and `roles:read`. Leave them unchecked: the MCP doesn't use them.
6. Save. Copy the **Client ID** from the **Credentials** dialog, then click **I'm finished**. There is no secret: with PKCE, the Client ID is all Gemini needs.

## 2. Enable the Gemini Enterprise app product

Done once, by a GCP admin. In Google Cloud, create a project or pick an existing one, and enable the **Gemini Enterprise** app product in it. Gemini Enterprise is Google Cloud's product for building AI agents that work with your organization's data and systems.

## 3. Create the app and add Stensul

1. Click **Create app** and enter the app name and location. Selecting the app shows its link, where people will use Gemini connected to Stensul.
2. Go to **Connected data stores > New data store**.
3. Select **Add MCP server** and enter:

| Field | Value |
| --- | --- |
| Authentication method | OAuth 2.0 |
| MCP Server URL | `https://mcp.stensul.com/<your-instance>/mcp` |
| Authorization URL | `https://mcp.stensul.com/<your-instance>/oauth/authorize` |
| Access Token URL | `https://mcp.stensul.com/<your-instance>/oauth/token` |
| OAuth2 Client ID | From step 1 |
| Enable PKCE Support | Enabled |

4. Click **Verify OAuth**, complete the Stensul sign-in and click **Continue**.
5. Add a description for the MCP server and these recommended instructions:

```text
You build and edit Stensul emails using the MCP for stensul.com.
Always read the tool description and resources with instruction to understand how to use them. Before responding, if the user ask it complete the entire email creation process and update the content.
```

6. Enter a name for the data connector and click **Create**.
7. Go to the **Actions** section, reload the custom actions and approve the sign-in.
8. Select all the actions and enable them.

The app's **Overview** section shows the link people use to reach Gemini connected to Stensul.

## 4. Add users and roles

1. In the app, go to **Manage users > Add users** and add each person's email address.
2. In the project's **IAM** settings, give those people the **Gemini Enterprise User** role.

## 5. Sign in and draft an email

Each person opens the app's link, goes to **Connectors**, enables the Stensul connector and completes the Stensul sign-in. Then:

```text
Using Stensul, create a draft email in the <library name> library inviting
customers to our winter webinar. Start from the most relevant approved
template, write real copy for every editable text and button, and give me the
edit link.
```

You're done when Gemini returns an edit link that opens the draft in Stensul.

## If something goes wrong

| What you see | Fix |
| --- | --- |
| The sign-in screen has no **Approve** button | You aren't signed in to Stensul. Sign in to Stensul, then retry the sign-in from Gemini |
| Redirect error at sign-in | The redirect URI must be exactly `https://mcp.stensul.com/<your-instance>/oauth/callback` |
| Gemini can't reach Stensul | Check the MCP Server URL is `https://mcp.stensul.com/<your-instance>/mcp`, with your instance name and a single slash before `mcp` |
| No API connections page in Stensul | The external API is off, or you lack `access_admin_api_connections`. Ask your Stensul customer success manager |