Allow the Mobile Locker MCP server in Gemini
Private beta. The Mobile Locker MCP server is in private beta. Only a team that Mobile Locker has invited can connect. Email support@mobilelocker.com before you allow it for your users. Mobile Locker will send the server address when your team is in the beta.
Use this article if you administer Gemini Enterprise in Google Cloud. The consumer Gemini app is a different product. This article covers Gemini Enterprise.
Mobile Locker has not completed a click-through of Gemini Enterprise against our server. Follow Google's current pages if a label on your screen differs from this article.
Read Security of the Mobile Locker MCP server before you connect the server.
Who allows it
A Gemini Enterprise administrator connects the MCP server as a data store. A field user cannot add it.
What to allow
https://app.mobilelocker.comfor the Global region. Most teams use this host.https://eu.mobilelocker.comwhen the team uses the EU instance.- The team host your users already sign in on, when that host is different
- Sign-in paths under
/oauth/and/.well-known/oauth- - The MCP server address Mobile Locker sends for your beta
Leave the OAuth client id and client secret empty. The connection uses the Mobile Locker sign-in page.
Most teams that connect also use Single Sign-On in Mobile Locker. Allow the hosts in Allow these hosts, including WorkOS and your identity provider. You do not set up a second SSO connection for this server.
Connect the server
- In the Google Cloud console, open Gemini Enterprise.
- Create a data store for a custom MCP server.
- Enter the server address Mobile Locker sent you.
- Choose OAuth and leave the client id and client secret empty.
- Save the data store and make it available to the users who should have it.
What each person does
Each person signs in with their own Mobile Locker account. The data store does not create a shared login. When the email domain has an SSO connection, sign-in follows How SSO works.