Guide 12
Connect Gemini Enterprise
Create an OAuth app in Owlbound, add it as a custom MCP server in Google Cloud, and let each person sign in.
Last updated from API version 2026-10-06 at (live spec, refreshed hourly). openapi.json
Gemini Enterprise adds custom MCP servers through a Google Cloud admin. It does not register itself with Owlbound, so you create an OAuth app in Owlbound first and paste its client ID and secret into Google Cloud. Each person then signs in with their own Owlbound account.
Who does what
| Step | Who |
|---|---|
| Create the OAuth app in Owlbound | An Owlbound workspace owner or admin |
| Add the MCP server in Google Cloud | A Gemini Enterprise admin |
| Sign in and allow access | Each person who uses it |
1. Create the OAuth app in Owlbound
- In Owlbound, open Settings > Workspace > Developer.
- In OAuth apps, click New OAuth app. Owlbound may ask you to sign in again first.
- Keep the prefilled values unless you need to change them: the name
Gemini Enterprise, the redirect URIhttps://vertexaisearch.cloud.google.com/oauth-redirect, and the scopes it may ask for (read, enrich, write, act). Untick any you do not want Gemini to use. Each person still gets at most their own role's rights. - Click Create app. Owlbound shows the values below. Copy all of them now.
| Value | What it looks like |
|---|---|
| MCP server URL | https://app.owlbound.ai/api/v1/mcp |
| Authorization URL | https://app.owlbound.ai/oauth/authorize |
| Token URL | https://app.owlbound.ai/oauth/token |
| Client ID | owc_... |
| Client secret | owl_ocs_..., shown once |
| Scopes | read enrich write act offline_access |
The secret is shown once
If you lose it, revoke the app and create a new one. The app only works for this workspace: members of other workspaces cannot use it.
2. Add the MCP server in Google Cloud
- In the Google Cloud console, open Gemini Enterprise, then your app's Data stores (or Connectors), and add a Custom MCP server.
- Fill in the form with the values from step 1, as in the table below.
- Save, then choose which Owlbound tools (actions) to turn on. Gemini Enterprise turns actions off by default and allows up to 100.
- Assign the connector to the people who should use it.
| Field | Value |
|---|---|
| MCP Server URL | https://app.owlbound.ai/api/v1/mcp |
| Authentication | OAuth 2.0 |
| Authorization URL | https://app.owlbound.ai/oauth/authorize |
| Authorization URL parameters | Leave empty |
| Token URL | https://app.owlbound.ai/oauth/token |
| Client ID | The owc_... value |
| Client secret | The owl_ocs_... value |
| Enable PKCE support | On (recommended; off also works) |
| Scopes | read enrich write act offline_access |
3. Sign in (each person)
- In Gemini Enterprise, use the Owlbound connector for the first time.
- Gemini opens an Owlbound window: sign in, check the workspace, review the access and click Allow.
- You return to Gemini, which can now use Owlbound as you.
What Gemini can and cannot do
- Gemini acts as you, in the workspace you picked, with at most your role's rights and the scopes you allowed.
- Every action tool runs a dry run first, so you see the plan, the targets and the credits before anything runs.
- Sends (LinkedIn, email, CRM) are never sent by Gemini. They wait for a person in Approvals in the Owlbound app, and Gemini gives you the link. See how actions work.
Revoke access
- One person: Settings > Connected apps, then Disconnect.
- Everyone: an owner or admin clicks Revoke next to the app in Settings > Workspace > Developer > OAuth apps. Every connection made through it ends at once and the secret stops working. Remove the MCP server in Google Cloud too.
Troubleshooting
- “The redirect URI does not match this app's registration”: the app's redirect URI must be exactly
https://vertexaisearch.cloud.google.com/oauth-redirect. invalid_clientwhen connecting: the client secret is wrong, or the app was revoked. Create a new app and update Google Cloud.- “This OAuth app was revoked”: ask an owner or admin for a new app.
- No workspace to pick: you are not a member of the workspace that created the app.
Other Gemini apps
- Gemini CLI: no OAuth app needed. See Connect Gemini CLI.
- Gemini app (gemini.google.com): not tested yet. See the note below.
Gemini app: untested
Google offers custom MCP apps in the consumer Gemini app only to some personal accounts (US, 18 or older, English). We have not tested Owlbound there yet. If it asks for a client ID and secret, an Owlbound OAuth app with the redirect URI the Gemini app shows should work.