Overview
Yoodli MCP Server connects Yoodli to Gemini Enterprise through the Model Context Protocol (MCP). From a chat, Gemini Enterprise can find roleplays, create a practice roleplay, and return a link. The person still practices inside Yoodli. The card is marked Early access, and an organization admin enables it before anyone can connect.
Three roles take part. A Yoodli organization admin enables MCP and creates an MCP client. An admin of Gemini Enterprise then adds Yoodli. Each person then signs in to Yoodli and selects Authorize.
Gemini Enterprise always needs an MCP client. It does not register itself, so you paste an OAuth client ID and an OAuth client secret from an MCP client that a Yoodli organization admin creates.
Gemini Enterprise acts as the person who selected Authorize, using that person's Yoodli account.
What it looks like when it's done
Here's the finished setup for an organization that connects Gemini Enterprise through a Google Cloud data store.
In Yoodli
On the Integrations page, the Yoodli MCP Server card shows its switch Enabled, and a content space is selected for organization roleplays created through MCP.
On the MCP clients page, an enabled MCP client has the redirect URI https://vertexaisearch.cloud.google.com/oauth-redirect.
In Gemini Enterprise
A Custom MCP Server data store connects to Yoodli with OAuth 2.0 and the MCP client's values. Its state is Active, and the Yoodli actions people use are enabled.
The result
A person selected Authorize on the Yoodli consent page.
The person asks for a roleplay. The tool creates it in Yoodli and returns a practice link, and the person practices inside Yoodli.
Setting it up
Step 1: Turn on Yoodli MCP and copy the server URL
Sign in to Yoodli as an organization admin.
Open Organization settings.
Under Advanced Settings, find Integrations. If you do not see Integrations, contact your Yoodli account team.
If the button says Manage, select Manage. If it says Create new, select Create new. The Integrations page opens.
On the Yoodli MCP Server card, enable the switch.
Copy the server URL on the card. On production, it is https://app.yoodli.ai/api/mcp/1.0. A tool that registers itself needs only this URL.
Select the content space for organization roleplays created through MCP.
Not sure which content space to select? The space decides where organization roleplays created through MCP go, and which goals they can use. See Where does a roleplay created through MCP go? in MCP Integrations.
Step 2: Create an MCP client
Gemini Enterprise does not register itself, so it always needs an MCP client. Use the redirect URI https://vertexaisearch.cloud.google.com/oauth-redirect.
On the Integrations page (from Organization settings, under Advanced Settings, select Manage or Create new on Integrations), find the Yoodli MCP Server card. Make sure that its switch shows Enabled. While MCP is off, MCP clients cannot connect.
On the card, select Does your AI tool ask for an OAuth client ID and client secret? Set up an MCP client for it. The MCP clients page opens. If you do not see that link, see The Yoodli MCP Server card has no link to set up an MCP client.
Select Create an MCP client.
Enter a name that your admins know, such as Gemini Enterprise.
Enter the redirect URI for your AI tool. It must use https (http is allowed only for localhost), and it cannot contain a # part or a user name. You cannot edit it after you save. To change it later, disable the client and create a new one.
If the tool documents a second callback, select Add another redirect URI and add that URI too.
Select Save.
Copy the OAuth client secret. Yoodli shows it on this page only.
Not sure where to get the redirect URI? See Where do I get the redirect URI for Gemini Enterprise? Left the page before you copied the secret? See I lost the client secret.
Values to paste into the AI tool
The MCP clients page lists each value under Values for your AI tool's form, with a copy control. On production, the values are:
Field in the AI tool | Value |
MCP server URL | |
Authorization endpoint | |
Token endpoint | |
Token refresh endpoint | |
Resource |
When your Yoodli site is not production, copy every value from the MCP clients page. The page matches the site you are signed in to.
Paste the OAuth client ID into the AI tool.
Paste the OAuth client secret into the AI tool.
When the form requires a scope, enter mcp. When the form allows an empty scope, leave Scope empty.
When the form shows these controls, enable PKCE, select method S256, and send the client secret in the request body.
Not sure why PKCE and the request body matter? See What does Yoodli require from a tool that uses a client ID and secret?
Step 3: Add Yoodli to Gemini Enterprise
Google maintains Gemini Enterprise's screens, and they can change. If a label doesn't match these steps, follow Google's current steps to add a custom MCP server.
The server URL, endpoints, client ID and client secret in the steps below come from the MCP clients page (see Values to paste into the AI tool).
Google Cloud
The data store can reach Yoodli only after Google allows calls to app.yoodli.ai.
Allow app.yoodli.ai for the server URL, the authorization endpoint, and the token endpoint.
Open Gemini Enterprise.
Open Data stores.
Create a data store.
Select Custom MCP Server.
Select OAuth 2.0.
Paste the server URL from the MCP clients page.
Paste the authorization endpoint.
Paste the token endpoint.
Paste the OAuth client ID.
Paste the OAuth client secret.
Enter mcp in Scopes.
Enable PKCE. Yoodli rejects a sign-in that omits PKCE method S256.
Leave Authorization URL Parameters empty. Yoodli returns a refresh token with no extra parameters.
Select Verify Auth.
If Yoodli asks you to sign in, sign in.
Select Authorize.
Continue.
Enter a name for the data store.
Create the data store.
When the state is Active, the data store is ready. Google imports the Yoodli tools as actions, and leaves every action off.
Open the data store.
Open Actions.
Reload the actions.
Enable each action you want people to use.
Business edition
Sign in at https://business.gemini.google/.
Open Settings.
Open the team.
Open Connected apps.
Select Add MCP Server.
Paste the server URL.
Enter the name Yoodli.
Select OAuth 2.0.
Paste the authorization endpoint.
Paste the token endpoint.
Paste the OAuth client ID.
Paste the OAuth client secret.
Enter mcp in Scopes.
If the form shows PKCE, enable PKCE.
Add the server.
Step 4: Authorize Yoodli and use it in a chat
Each person does these steps after Yoodli is added to their AI tool.
Start the connection in the AI tool.
If Yoodli asks you to sign in, sign in.
Check the Yoodli consent page, Authorize MCP Access. It says that an application is requesting access to your Yoodli account. It names an organization only when an admin created the MCP client, or when more than one of your organizations has MCP on.
If the page lists more than one organization, select one organization. The AI tool then works in that organization only. To use a different organization later, start the connection again and select that one.
Select Authorize.
Setup FAQs
Use these when a setup step raises a question.
What happens when an admin disables MCP?
Yoodli rejects every MCP call for the organization, starting with the next request, for as long as the switch stays off. People do not sign in again for that to apply, and MCP clients cannot connect. While MCP is off, the MCP clients page says that MCP is off. To turn it back on, go to the Integrations page and enable the switch on the Yoodli MCP Server card.
Does the AI tool get my Yoodli password, and how long does it stay connected?
No. Yoodli does not send your Yoodli password to the AI tool, and the tool can stay connected for up to 30 days after you select Authorize. The access token expires after one hour. Yoodli also returns a refresh token, and the tool uses it to stay connected. After 30 days, the person starts the connection again and selects Authorize.
Why does the consent page show only one organization?
When the AI tool uses an MCP client that a Yoodli admin created, Yoodli limits the connection to the organization that created that client. The consent page then shows that organization only. If you are not a member of that organization, see The consent page shows Organization Not Available.
What does Yoodli require from a tool that uses a client ID and secret?
PKCE with method S256, and the client secret in the token request body (client_secret_post).
Yoodli rejects a sign-in that omits PKCE method S256.
Yoodli rejects a secret sent only in the Authorization header.
Yoodli returns a refresh token with no extra parameters.
Where do I get the redirect URI for Gemini Enterprise?
Gemini Enterprise uses a fixed URI: https://vertexaisearch.cloud.google.com/oauth-redirect.
Does the client secret expire?
No. The secret stops only when you create a new secret or disable the MCP client.
A new secret stops the old one at the next token request.
Disable stops new tokens for that client, and Enable lets it connect again.
Either way, an access token that already exists stays valid for up to one hour.
Troubleshooting
The Yoodli MCP Server card has no link to set up an MCP client
Contact your Yoodli account team.
The consent page shows MCP Not Available
MCP is off for every organization you belong to. An organization admin enables the switch on the Yoodli MCP Server card, on the Integrations page.
The consent page shows Organization Not Available
If: you are not a member of the organization that created the MCP client. Then: sign in as a member of that organization. When you cannot, ask the admin who created the client.
If: MCP is off for that organization. Then: an organization admin of that organization enables the switch on the Yoodli MCP Server card, on the Integrations page.
I created an organization roleplay, but no one can find it
Assign it to groups. An organization roleplay created through MCP starts with no groups. See Where does a roleplay created through MCP go? in MCP Integrations.
The AI tool returns a 401 error
Start the connection again in the AI tool. A 401 means the access token is expired or invalid.
The AI tool returns a 403 error
If: the error says "MCP is not enabled for your organization." Then: an organization admin enables the switch on the Yoodli MCP Server card, on the Integrations page.
If: the error says "You are not a member of the authorized organization." Then: start the connection again in the AI tool, and sign in with an account that is a member of that organization.
Sign-in fails after I paste a client ID
If: the MCP client's redirect URI doesn't match the AI tool's callback URL, character for character. Then: on the MCP clients page, open the menu on the client's row and select Disable. Then create a new MCP client with the callback URL that the AI tool shows. A redirect URI cannot be edited.
If: PKCE in the AI tool isn't set to S256. Then: enable PKCE and select method S256.
If: the AI tool sends the client secret in the Authorization header. Then: set the AI tool to send the client secret in the request body.
I lost the client secret
Create a new secret. On the MCP clients page, open the menu on the client's row and select Create new secret. Paste the new secret into the AI tool. The previous secret stops at the next token request.
Yoodli says my organization already has the maximum number of enabled MCP clients
Disable an MCP client you no longer use, then create the new one. An organization can have three enabled MCP clients. On the MCP clients page, open the menu on that client's row and select Disable.
Still stuck? Email [email protected] with the AI tool you're connecting, the error or page it shows, and your Yoodli organization name.