@chrischall/gemini-mcp 2.3.2 → 2.3.4

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Google Gemini image generation and editing — generate and edit images via the Gemini API",
-    "version": "2.3.2"
+    "version": "2.3.4"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Gemini Images",
       "source": "./",
       "description": "Generate and edit images with Google Gemini image models (Nano Banana / Nano Banana Pro) via natural language prompts",
-      "version": "2.3.2",
+      "version": "2.3.4",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gemini-mcp",
   "displayName": "Gemini Images",
-  "version": "2.3.2",
+  "version": "2.3.4",
   "description": "MCP server for Google Gemini image generation and editing — generate and edit images via the Gemini API",
   "author": {
     "name": "Chris Hall",
@@ -20,5 +20,5 @@
     "mcp"
   ],
   "skills": "./skills/",
-  "mcp": "./.mcp.json"
+  "mcpServers": "./.mcp.json"
 }

package/README.md

@@ -14,7 +14,7 @@ Developed and maintained by AI (Claude Code).
 |---|---|---|
 | `GEMINI_API_KEY` | Yes | Your Google Gemini API key ([aistudio.google.com/apikey](https://aistudio.google.com/apikey)) |
 | `GEMINI_IMAGE_MODEL` | No | Override the default image model (default: `gemini-3.1-flash-image`) |
-| `GEMINI_OUTPUT_DIR` | No | Default directory for generated images (default: current working directory). When set, a per-call `output_dir` must be inside it. |
+| `GEMINI_OUTPUT_DIR` | No | Default directory for generated images (default: ~/Downloads/gemini-mcp). When set, a per-call `output_dir` must be inside it. |
 | `GEMINI_INPUT_DIR` | No | Directory to resolve bare input-image filenames against (so `images: ["foo.jpg"]` works) |
 | `GEMINI_UPLOAD_DIR` | No | Restrict local files streamed to the Gemini Files API (`gemini_upload_file` `path`, `video_path`) to these directories — one or more, separated by `:` (`;` on Windows); `~` allowed. A path outside is refused before any upload. Unset: no restriction |
 | `GEMINI_REFERENCE_DIR` | No | Restrict local **reference images** (the `images` / `master_images` paths read and sent to Gemini — inline, or as a Files API upload once reused) to these directories — `:`-separated (`;` on Windows), `~` allowed; `GEMINI_OUTPUT_DIR` is always allowed too, so generated images can be fed back in. A path outside (symlinks followed) is refused before it is read. Unset: `GEMINI_UPLOAD_DIR` applies instead. If both are unset, reference images are **unrestricted** on a local install (any file the server can read can be sent), and confined to `$MCP_DATA_DIR/uploads` when `MCP_DATA_DIR` is set (hosted) |
@@ -26,7 +26,8 @@ Developed and maintained by AI (Claude Code).
 
 Sending a **local file** to Google (the `images` / `master_images` / `video_path` inputs, or
 `gemini_upload_file`'s `path`) and every **delete** ask for confirmation first. A client that can
-show a confirmation prompt (Claude Code) gets the real prompt. Elsewhere the first call does
+show a confirmation prompt (Claude Code) gets the real prompt, unless `MCP_CONFIRM_ELICITATION=off`.
+Elsewhere the first call does
 nothing and returns a preview (the resolved local paths with their MIME types and sizes, or the
 method/path being deleted) plus a `confirmToken`; only a repeat call with the same arguments and
 that token proceeds. The token is single-use, expires, and is bound to the exact arguments — a
@@ -35,7 +36,8 @@ changed prompt or a swapped file between the two calls is refused. Pure text pro
 
 | variable | default | |
 |---|---|---|
-| `MCP_CONFIRM_MODE` | `ask-user` | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt. An unrecognised value is treated as `refuse`. |
+| `MCP_CONFIRM_MODE` | `ask-user` | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless `MCP_CONFIRM_ELICITATION=off`. An unrecognised value is treated as `refuse`. |
+| `MCP_CONFIRM_ELICITATION` | `on` | `off` never shows a confirmation prompt, so every client gets the `MCP_CONFIRM_MODE` path. Set it for a client that claims to support prompts but never shows one (the gated call hangs — opencode 2.0.x). Any other value stays `on`, with a warning on stderr. |
 | `MCP_CONFIRM_TTL_SECONDS` | `600` | How long a token stays valid. |
 | `MCP_CONFIRM_SECRET` | random per process | Signing key; set it only if tokens must survive a server restart. |