Gemini CLI 0.60 hardens MCP OAuth, sandboxing and extension boundaries

Google’s open-source coding CLI ships a release centred on safer tool execution and extension handling.

Human reviewed · generated by codex/gpt-5.6-luna

Use your e-reader’s page or volume buttons, Page Up/Down, or ←/→ to move one screen at a time.

LISTEN TO THIS ARTICLE

Use your browser’s voice to hear this article read aloud.

Speed

Ready to listen.

Summary

Gemini CLI 0.60 enforces RFC 9207 issuer identification in MCP OAuth and improves web-fetch destination validation and connection routing. It also isolates macOS sandbox directories, validates extension paths and workspace boundaries, checks configuration ownership, sanitises environment changes and preserves provenance metadata for untrusted tool output.

Why it matters

The changes address the trust boundaries where coding agents connect to external tools, filesystems, extensions and web resources.

Claude Code v2.1.273 adds gateway telemetry hints and safer agent-session recovery
LiteLLM 1.103 dev release tightens MCP admission, guardrails and spend controls
Meta exposes WhatsApp Business setup to coding agents through a new MCP server

Sources

Release v0.60.0

Summary

Why it matters

Related coverage

Sources