https://worldmonitor.app/mcp over Streamable HTTP, with OAuth 2.1 sign-in (PKCE, Dynamic Client Registration and Client ID Metadata Documents). Antigravity uses the same server, tools and entitlements as other supported clients. Gemini custom apps and Connected Apps sign in through Google’s OAuth callbacks, which the redirect URI allowlist accepts. Pro-only tools stay Pro-only. See the MCP Server overview for auth, quotas and the tool list.
Google Antigravity
Install the plugin
The repository ships an Antigravity plugin manifest at.antigravity-plugin/plugin.json. It bundles the two MCP servers in mcp_config.json and the agent skills in skills/.
AGENTS.md, mcp.json, and the root plugin.json. Antigravity uses .antigravity-plugin/plugin.json, mcp_config.json, and skills/; the other files support repository development and other clients. Before Marketplace submission, prepare a standalone bundle with the Antigravity manifest, README, logo, MCP configuration, and skills, then run agy plugin validate --strict <bundle-directory> and require zero errors and warnings.
When the Marketplace listing is live, install it with agy plugin install worldmonitor@antigravity-plugins-official.
Add the server manually
In the Antigravity IDE, open … > MCP Servers in the agent side panel and editmcp_config.json. In the CLI, use ~/.gemini/config/mcp_config.json (global) or .agents/mcp_config.json (workspace):
serverUrl for remote servers and also accept url, which the plugin’s bundled mcp_config.json uses.
Antigravity’s OAuth callback, https://antigravity.google/oauth-callback, is already on the redirect URI allowlist.
Gemini
Developer Mode (custom app)
Follow Google’s Developer Mode guide: choose + Create new, enterhttps://worldmonitor.app/mcp as the MCP Server URL, accept the security notice and connect. Gemini registers through Dynamic Client Registration with a callback under https://oauth-redirect.googleusercontent.com/r/ or /a/, which the redirect URI allowlist accepts.
Check these during the first Developer Mode run. They have not yet been tested against Gemini:
- Sign-in completes and a Pro-only tool answers for a Pro account.
- The connection survives two token refreshes. Google asks servers to return the same refresh token on each refresh. WorldMonitor issues a new one each time and revokes the token family when an old refresh token is reused. If Gemini keeps the first refresh token, the second refresh disconnects the user.
- Token requests succeed. WorldMonitor registers every client as a public client (
token_endpoint_auth_method: none). If Gemini sends a client secret, check that token requests still succeed.
Connected App listing metadata
These values are used when registering WorldMonitor in the Google Connected Console. Before submitting, complete console-issued domain verification, pass the Developer Mode checks above, and test end to end with a Pro account.
Capabilities:
- Browse source-attributed world headlines
- Read country risk and intelligence briefs
- Check maritime chokepoint and energy disruption status
- Compare macro and market histories
- @WorldMonitor what are today’s top world headlines?
- @WorldMonitor summarize the current risk picture for Taiwan
- Check which shipping chokepoints are disrupted on WorldMonitor
