Connect Onplana to Gemini Enterprise
Gemini Enterprise can call outside tools through a custom MCP server, which an administrator adds in Google Cloud as a connected data store. Onplana’s MCP server is the same one ChatGPT, Claude and Cursor use, so once it is connected your team can ask Gemini what is overdue, read a project’s status, and create or update tasks without leaving Gemini.
Using Gemini CLI or Gemini Code Assist instead? Those connect with a personal token in a few minutes, no request needed: Connect Onplana to Gemini CLI and Code Assist.
Quick reference
| Setting | Value |
|---|---|
| MCP server URL | https://mcp.onplana.com/mcp |
| Transport | Streamable HTTP |
| Authorization URL | https://mcp.onplana.com/oauth/authorize |
| Token URL | https://mcp.onplana.com/oauth/token |
| Scope | mcp |
| Client ID and client secret | Issued by Onplana for your organization (early access) |
How the connection works
Section titled “How the connection works”- An administrator connects it once. A Gemini Enterprise admin adds Onplana as a custom MCP server data store in the Google Cloud console, using the client ID and secret Onplana issued.
- Each person signs in to Onplana. The first time Gemini runs an Onplana action for someone, they sign in with their own Onplana account and approve the connection. Gemini then works with what that person can see in Onplana, never more.
- Onplana’s sign-in is OAuth with PKCE. Onplana requires PKCE (S256) on every sign-in and reads the client secret from the token request body, not from an HTTP Basic header. The access token lasts 90 days; after that, Gemini asks the person to sign in again.
Set it up
Section titled “Set it up”-
Request your client. Use the Tell us you want this link above. Onplana sends a client ID and client secret for your organization, with Google’s callback address already registered on it. Store the secret somewhere safe; Onplana shows it once.
-
Add the data store. In the Google Cloud console, open Gemini Enterprise, go to Connected data stores, create a new data store, and pick Custom MCP Server as the source. Google’s labels move between releases, and Google decides who may create one (an admin role, and in some organizations a policy that has to allow custom MCP servers first); see Google’s documentation for the current requirements.
-
Fill in the server and sign-in fields from the quick reference above: the MCP server URL, the authorization and token URLs, the scope
mcp, and the client ID and secret Onplana sent. Leave HTTP Basic authentication off. -
Authorize. Google asks you to sign in to Onplana to confirm the connection. Sign in to the Onplana organization the client was issued for and approve.
-
Switch on the actions you want (next section), then save. Google turns every action off by default.
The 20 actions to switch on first
Section titled “The 20 actions to switch on first”Google caps a data store at 100 enabled actions and starts with all of them off. Onplana’s MCP server offers far more than 100, so pick on purpose. These 20 cover what a project manager does every day: find work, read status, and make the small updates that keep a plan current.
| Action | What it does | Changes data |
|---|---|---|
whoami |
Shows who Gemini is signed in as, and in which organization. A good first test. | No |
list_projects |
Lists the projects you can see. | No |
get_project |
Reads one project’s details. | No |
summarize_project |
Writes a short summary of a project: what changed, risks, blockers, next steps. | No |
list_tasks |
Lists a project’s tasks, with filters. | No |
get_task |
Reads one task in full. | No |
list_my_tasks |
Lists the tasks assigned to you. | No |
list_overdue |
Lists overdue tasks across your projects. | No |
list_milestones |
Lists a project’s milestones. | No |
list_risks |
Lists a project’s risks. | No |
list_issues |
Lists a project’s issues. | No |
list_comments |
Reads the comments on a task or project. | No |
list_recent_activity |
Shows what changed on a project since a given time. | No |
search_org_knowledge |
Searches across your tasks, projects, risks, goals, wiki pages and comments. | No |
generate_status_report |
Drafts a status report for one project and returns it to Gemini. It does not send anything. | No |
create_task |
Creates a task. | Yes |
update_task |
Updates a task’s status, dates, priority or other fields. | Yes |
assign_task |
Assigns a task to someone. | Yes |
create_comment |
Posts a comment on a task, project or issue. | Yes |
create_issue |
Logs an issue on a project. | Yes |
Room for more: with these 20 on, 80 slots are left. Common next picks
are create_milestone, create_risk,
link_dependency and list_team_members. Deleting
work is governed separately; see
Control what agents can delete.
Verify the connection
Section titled “Verify the connection”In Gemini Enterprise, ask something only your Onplana workspace can answer:
- “Who am I signed in as in Onplana?”
- “What is overdue across my Onplana projects?”
- “Summarize the Website Redesign project.”
A working connection answers with your real data. On the Onplana side, Settings → Agents shows the connection with the time it last called.
Permissions and what Gemini can see
Section titled “Permissions and what Gemini can see”- Gemini sees only what the signed-in person can see in Onplana. It cannot escalate privileges, mint API tokens, change passwords or read security settings.
- Every change Gemini makes is attributed to a clearly badged agent persona in the activity log, never silently to a person.
- Each person’s connection counts toward your plan’s agent connection limit, the same as any other MCP client, and the monthly write-action limits on Free and Starter apply. See AI agent action limits.
- Conversations live with Google under your Gemini Enterprise data settings, so Onplana data quoted in a conversation becomes part of that history. Treat the connection like any other third-party service that handles that data.
Managing the connection
Section titled “Managing the connection”- Revoke one person: open Settings → Agents in Onplana and revoke the connection. An organization admin can revoke any member’s connection from the same panel.
- Turn it off for everyone: an organization admin can disable all agent connections from Organization Settings → AI and Storage.
- Retire the client: ask Onplana to revoke the client ID, and delete the data store in Google Cloud.
Is this the same as Gemini CLI? No. Gemini CLI and Gemini Code Assist run on your own machine and connect with a personal access token you create yourself, today, on any plan. Gemini Enterprise is the Google Cloud product for whole teams, and its admin-managed setup needs a client that Onplana issues. The Gemini CLI guide covers the first.
Do I need a paid Onplana plan? No. MCP connections are available on every plan, including Free. What scales with the plan is how many agent connections can be active at once and the monthly write-action limit.
Is Onplana in a Google marketplace or agent gallery? No. The connection is a custom MCP server your administrator adds. Google has not reviewed or certified it.
Why only 20 actions? They are a starting point, not a limit. Google allows up to 100 enabled actions per data store, so you can add more as your team asks for them.
How do I show interest without committing? Use the Tell us you want this link. It is an email, not a sign-up; it tells us which teams to set up first.
Related
Section titled “Related”- Connect an external agent, the token and MCP config path for Claude Code, Cursor, Codex and other clients
- Connect Onplana to ChatGPT (from the directory), the one-click listing on OpenAI’s side
- Connect Onplana from the Claude Connectors Directory, the one-click listing for claude.ai and Claude Desktop
- AI agent action limits, the monthly write caps on Free and Starter
- Control what agents can delete, the governance gate for destructive actions
Was this helpful?
Thanks for your feedback!