Gemini CLI tools
The Gemini CLI includes built-in tools that the Gemini model uses to interact with your local environment, access information, and perform actions. These tools enhance the CLI's capabilities, enabling it to go beyond text generation and assist with a wide range of tasks.
Overview of Gemini CLI tools
In the context of the Gemini CLI, tools are specific functions or modules that the Gemini model can request to be executed. For example, if you ask Gemini to "Summarize the contents of my_document.txt
," the model will likely identify the need to read that file and will request the execution of the read_file
tool.
The core component (packages/core
) manages these tools, presents their definitions (schemas) to the Gemini model, executes them when requested, and returns the results to the model for further processing into a user-facing response.
These tools provide the following capabilities:
- Access local information: Tools allow Gemini to access your local file system, read file contents, list directories, etc.
- Execute commands: With tools like
run_shell_command
, Gemini can run shell commands (with appropriate safety measures and user confirmation). - Interact with the web: Tools can fetch content from URLs.
- Take actions: Tools can modify files, write new files, or perform other actions on your system (again, typically with safeguards).
- Ground responses: By using tools to fetch real-time or specific local data, Gemini's responses can be more accurate, relevant, and grounded in your actual context.
How to use Gemini CLI tools
To use Gemini CLI tools, provide a prompt to the Gemini CLI. The process works as follows:
- You provide a prompt to the Gemini CLI.
- The CLI sends the prompt to the core.
- The core, along with your prompt and conversation history, sends a list of available tools and their descriptions/schemas to the Gemini API.
- The Gemini model analyzes your request. If it determines that a tool is needed, its response will include a request to execute a specific tool with certain parameters.
- The core receives this tool request, validates it, and (often after user confirmation for sensitive operations) executes the tool.
- The output from the tool is sent back to the Gemini model.
- The Gemini model uses the tool's output to formulate its final answer, which is then sent back through the core to the CLI and displayed to you.
You will typically see messages in the CLI indicating when a tool is being called and whether it succeeded or failed.
Security and confirmation
Many tools, especially those that can modify your file system or execute commands (write_file
, edit
, run_shell_command
), are designed with safety in mind. The Gemini CLI will typically:
- Require confirmation: Prompt you before executing potentially sensitive operations, showing you what action is about to be taken.
- Utilize sandboxing: All tools are subject to restrictions enforced by sandboxing. This means that when operating in a sandbox, any tools (including MCP servers) you wish to use must be available inside the sandbox environment. For example, to run an MCP server through
npx
, thenpx
executable must be installed within the sandbox's Docker image or be available in thesandbox-exec
environment.
It's important to always review confirmation prompts carefully before allowing a tool to proceed.
Learn more about Gemini CLI's tools
Gemini CLI's built-in tools can be broadly categorized as follows:
- File System Tools: For interacting with files and directories (reading, writing, listing, searching, etc.).
- Shell Tool (
run_shell_command
): For executing shell commands. - Web Fetch Tool (
web_fetch
): For retrieving content from URLs. - Web Search Tool (
web_search
): For searching the web. - Multi-File Read Tool (
read_many_files
): A specialized tool for reading content from multiple files or directories, often used by the@
command. - Memory Tool (
save_memory
): For saving and recalling information across sessions.
Additionally, these tools incorporate:
- MCP servers: MCP servers act as a bridge between the Gemini model and your local environment or other services like APIs.
- Sandboxing: Sandboxing isolates the model and its changes from your environment to reduce potenital risk.