Copy the line for Antigravity from your dashboard and paste it into Antigravity.
Before you start
- An Agent Vault account, with a card if your agent will check out. New here? The Quickstart sets one up in about 5 minutes.
- Antigravity: the app, its IDE or its CLI. All three read the same MCP config.
Connect Antigravity
- Paste one line (recommended)
- Set it up by hand
1
Paste this into Antigravity
~/.gemini/config/mcp_config.json itself.2
Authenticate
Follow Sign in below.
Sign in
1
Open Customizations
In Antigravity, click Settings at the bottom left, or press
Cmd + , on
macOS (Ctrl + , on Windows and Linux), and open Customizations.2
Find agent-vault
If
agent-vault isn’t under Installed MCP Servers yet, click the refresh
button.3
Click Authenticate
Click Authenticate next to
agent-vault, and sign in on the Agent Vault
sign-in page that opens in your browser. If you are then shown an authorization
code, copy it, paste it back into the settings panel and click Submit./mcp, select
agent-vault and choose Authenticate. Sign in on the page that opens in your
browser, then paste the authorization code it shows back into the terminal.
Choose what it may use
A new connection starts with nothing granted, so your agent can’t use a card or a login yet. Until you choose, its first tool call answers:1
Make a first call
Ask your agent to call
get_token_catalog. It answers with the message above,
and the call creates the connection.2
Open Connected apps
In the dashboard sidebar, under Vault, click Connected apps. The new
connection’s row shows Choose what it may use.
3
Pick its cards and logins
Click Choose access. Under Cards and Logins, pick All, or keep
Only selected and tick the ones this agent may use.
4
Check the choices, then click Save access
Your first connection’s dialog opens with nothing ticked. After that, a new
connection’s dialog opens with the choices of the connection you used most
recently, so saving it unchanged grants the same cards and logins, and the same
three switches: Let this app create and change its own logins, Ask me
before every purchase from this app and Fill a test card instead of my
card. Check all of them for this agent before you click Save access.
Let the tools run without asking
Antigravity asks before each Agent Vault tool call, and its “always allow” covers only that one tool. Add this rule to your allowed permissions once, keeping the rules already there:- In the Antigravity app: Settings → General → Permission Settings. It is
stored under
userSettings.globalPermissionGrants.allowin~/.gemini/config/config.json. - In the Antigravity CLI: the
/permissionscommand, or thepermissions.allowlist in~/.gemini/antigravity-cli/settings.json. - In the Antigravity app on Windows: Google has not brought Permission Settings to Windows yet, and the older Windows settings have no allow list for MCP tools. Choose “always allow” the first time each Agent Vault tool asks; that approves that tool from then on.
Check it works
Ask Antigravity to call the Agent Vault toolget_token_catalog. It answers
with the mock tokens for the cards and logins you allowed, such as
av_card_1_number_u7x2k. Your real card number never reaches Antigravity.
Troubleshooting
agent-vault isn't under Installed MCP Servers
agent-vault isn't under Installed MCP Servers
Click the refresh button in Customizations. If it still isn’t there, check
that
~/.gemini/config/mcp_config.json has the entry above.Antigravity asks before every tool call
Antigravity asks before every tool call
Add the
mcp(agent-vault/*) rule from
Let the tools run without asking.The first tool call says to choose what this app may use
The first tool call says to choose what this app may use
The connection has nothing granted yet. Follow
Choose what it may use, then ask again.
Next
Your first checkout
Have Antigravity buy something, start to finish.
All agents
Connect another agent to the same vault.