Skip to main content
Connect Google Antigravity to Agent Vault so it can check out and sign in for you, using only mock tokens. It takes about 3 minutes: Antigravity adds the server itself, and you authenticate it in its settings.

Copy the line for Antigravity from your dashboard and paste it into Antigravity.

Before you start

  • An Agent Vault account, with a card if your agent will check out. New here? The Quickstart sets one up in about 5 minutes.
  • Antigravity: the app, its IDE or its CLI. All three read the same MCP config.

Connect Antigravity

Sign in

1

Open Customizations

In Antigravity, click Settings at the bottom left, or press Cmd + , on macOS (Ctrl + , on Windows and Linux), and open Customizations.
2

Find agent-vault

If agent-vault isn’t under Installed MCP Servers yet, click the refresh button.
3

Click Authenticate

Click Authenticate next to agent-vault, and sign in on the Agent Vault sign-in page that opens in your browser. If you are then shown an authorization code, copy it, paste it back into the settings panel and click Submit.
In the Antigravity CLI there is no settings panel. Type /mcp, select agent-vault and choose Authenticate. Sign in on the page that opens in your browser, then paste the authorization code it shows back into the terminal.

Choose what it may use

A new connection starts with nothing granted, so your agent can’t use a card or a login yet. Until you choose, its first tool call answers:
The connection itself appears in the dashboard only once your agent makes its first tool call, so make that call first.
1

Make a first call

Ask your agent to call get_token_catalog. It answers with the message above, and the call creates the connection.
2

Open Connected apps

In the dashboard sidebar, under Vault, click Connected apps. The new connection’s row shows Choose what it may use.
3

Pick its cards and logins

Click Choose access. Under Cards and Logins, pick All, or keep Only selected and tick the ones this agent may use.
4

Check the choices, then click Save access

Your first connection’s dialog opens with nothing ticked. After that, a new connection’s dialog opens with the choices of the connection you used most recently, so saving it unchanged grants the same cards and logins, and the same three switches: Let this app create and change its own logins, Ask me before every purchase from this app and Fill a test card instead of my card. Check all of them for this agent before you click Save access.
You can change or revoke the connection on the same page at any time. See Connected apps.

Let the tools run without asking

Antigravity asks before each Agent Vault tool call, and its “always allow” covers only that one tool. Add this rule to your allowed permissions once, keeping the rules already there:
  • In the Antigravity app: Settings → General → Permission Settings. It is stored under userSettings.globalPermissionGrants.allow in ~/.gemini/config/config.json.
  • In the Antigravity CLI: the /permissions command, or the permissions.allow list in ~/.gemini/antigravity-cli/settings.json.
  • In the Antigravity app on Windows: Google has not brought Permission Settings to Windows yet, and the older Windows settings have no allow list for MCP tools. Choose “always allow” the first time each Agent Vault tool asks; that approves that tool from then on.
The rule allows every Agent Vault tool and nothing else. Don’t turn on Turbo mode instead: it turns off every check.

Check it works

Ask Antigravity to call the Agent Vault tool get_token_catalog. It answers with the mock tokens for the cards and logins you allowed, such as av_card_1_number_u7x2k. Your real card number never reaches Antigravity.

Troubleshooting

Click the refresh button in Customizations. If it still isn’t there, check that ~/.gemini/config/mcp_config.json has the entry above.
Add the mcp(agent-vault/*) rule from Let the tools run without asking.
The connection has nothing granted yet. Follow Choose what it may use, then ask again.

Next

Your first checkout

Have Antigravity buy something, start to finish.

All agents

Connect another agent to the same vault.