Stay organized with collections
Save and categorize content based on your preferences.
This notice describes how Gemini Code Assist tools use your data and
make API calls on your behalf.
When you use Gemini Code Assist tools, Gemini Code Assist
tools collect your prompts and make API calls that include data taken from your
prompt to third-party services. This document outlines what API calls each tool
can make and what data is shared with the third party service.
Data shared with third-party services
Gemini Code Assist tools can share any data sent to them using the
@TOOL_NAME syntax with their third-party service. Gemini Code Assist
tools don't share data between tools. Gemini Code Assist tools don't
share your Gemini Code Assist chat history with third-party services
except when you prompt them using the @TOOL_NAME syntax.
REST API calls used by Gemini Code Assist tools
The following sections list the REST API calls each third-party tool can make
on your behalf when you prompt them from the Gemini Code Assist chat.
GitHub
The GitHub tool can use the following REST API calls on your behalf when you
prompt it from the Gemini Code Assist chat:
issues-and-pull-requests.create-issue: This REST API call creates an issue
in a GitHub repository given a GitHub repository, owner, and an issue title.
issues-and-pull-requests.list-comments: This REST API call gets the
comments associated with a pull request or an issue. given a GitHub
repository, owner, and an issue number.
search.code: Searches for code across all of GitHub.
search.commits: You can search for commits globally across all of GitHub,
or search for commits within a particular repository or organization."
search.issues-and-pull-requests: This REST API call lets you search for
specific issues and pull requests to retrieve all information related to
them across all repositories you have permission to access based on their
state (e.g. open or closed) and keywords.
API permissions:
repo: Grants full access to public and private repositories. This scope
includes repo:status, repo_deployment, public_repo, repo:invite,
security_events, administration, read:org, write:org,
read:public_key, write:public_key, read:gpg_key, write:gpg_key,
gist, workflow, and codespace.
GitLab
The GitLab tool can use the following REST API calls on your behalf when you
prompt it from the Gemini Code Assist chat:
ListProjects: Retrieves a list of projects for the current user.
ListIssues: Retrieves a list of issues for a specified project.
CreateIssue: Creates a new issue in a specified project.
ListMergeRequests: Retrieves a list of merge requests for a specified
project.
ListMergeRequestPipelines: Retrieves a list of pipelines for a specified
merge request.
API permissions:
read_api: Grants read-only access to the authenticated user's API.
read_repository: Grants read-only access to the repository.
read_user: Grants read-only access to the authenticated user's profile information.
api: Grants complete read/write access to the authenticated user's API.
Google Docs
The Google Docs tool can use the following REST API calls on your behalf when
you prompt it from the Gemini Code Assist chat:
ListFiles: Retrieve a list of files in the user's Google Drive based on a
given query or filters.
Export: Export the contents of a Google Doc in order to inspect its
contents. If the user is asking for any information that may be contained
within a given file, this is the REST API that should be called.
API permissions:
drive.readonly: Allows read-only access to your Google Drive files,
including all files you own and files have access to.
Sentry
The Sentry tool can use the following REST API calls on your behalf when you
prompt it from the Gemini Code Assist chat:
organizations: Return the current organization_id_or_slug.
getIssue: Return details on an individual issue. This returns the basic
stats for the issue (title, last seen, first seen), some overall numbers
(number of comments, user reports) as well as the summarized event data.
transactions: Return a list of transactions affected by an issue
issues: Return a list of issues and errors assigned for the given
organization and project.
The Atlassian Rovo tool can use the following REST API calls on your behalf when
you prompt it from the Gemini Code Assist chat:
completions: Send a request to Atlassian Rovo in OpenAI format (a list of
chat messages)
API permissions:
rovo: Grants access to Atlassian Rovo in the user's account.
MongoDB
The MongoDB tool tool can use the following REST API calls on your behalf when
you prompt it from the Gemini Code Assist chat:
createConversation: This chatbot can answer any question about databases
or MongoDB, provide examples of code, explain topics, etc. This operation
initializes the conversation.
addMessage: This chatbot can answer any question about databases or
MongoDB, provide examples of code, explain topics, etc. This operation adds
a new message to the conversation.
API permissions:
Not user-authenticated. Accesses the general MongoDB docs chatbot.
New Relic
The New Relic tool can use the following REST API calls on your behalf when you
prompt it from the Gemini Code Assist chat:
completions: Endpoint to send user prompts to New Relic AI and
receive responses
API permissions:
Access to New Relic's AI endpoint for the user's account.
Redis
The Redis tool can use the following REST API calls on your behalf when you
prompt it from the Gemini Code Assist chat:
chat: Endpoint to send user prompts to Redis AI and receive responses
API permissions:
Not user-authenticated. Accesses the general Redis chatbot.
Neo4j
The Neo4j tool can use the following REST API calls on your behalf when you prompt
it from the Gemini Code Assist chat:
invoke: Endpoint to send user prompts to Neo4j AI Chatbot and receive
responses
API permissions:
Not user-authenticated. Accesses the general Neo4j docs chatbot.
Snyk
The Snyk tool can perform the following operations on your behalf when you
prompt it from the Gemini Code Assist chat:
/scan: Fetches vulnerability logs from Snyk Extension
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-25 UTC."],[],[],null,["# Gemini Code Assist tools permissions\n\n| **Preview**\n|\n| This product or feature is in preview. Products and features that are\n| in preview are available \"as is\".\n\nThis notice describes how Gemini Code Assist tools use your data and\nmake API calls on your behalf.\n\nWhen you use Gemini Code Assist tools, Gemini Code Assist\ntools collect your prompts and make API calls that include data taken from your\nprompt to third-party services. This document outlines what API calls each tool\ncan make and what data is shared with the third party service.\n\nData shared with third-party services\n-------------------------------------\n\nGemini Code Assist tools can share any data sent to them using the\n`@TOOL_NAME` syntax with their third-party service. Gemini Code Assist\ntools don't share data between tools. Gemini Code Assist tools don't\nshare your Gemini Code Assist chat history with third-party services\nexcept when you prompt them using the `@TOOL_NAME` syntax.\n\nREST API calls used by Gemini Code Assist tools\n-----------------------------------------------\n\nThe following sections list the REST API calls each third-party tool can make\non your behalf when you prompt them from the Gemini Code Assist chat.\n\n### GitHub\n\nThe GitHub tool can use the following REST API calls on your behalf when you\nprompt it from the Gemini Code Assist chat:\n\n- `issues-and-pull-requests.create-issue`: This REST API call creates an issue in a GitHub repository given a GitHub repository, owner, and an issue title.\n- `issues-and-pull-requests.list-comments`: This REST API call gets the comments associated with a pull request or an issue. given a GitHub repository, owner, and an issue number.\n- `search.code`: Searches for code across all of GitHub.\n- `search.commits`: You can search for commits globally across all of GitHub, or search for commits within a particular repository or organization.\"\n- `search.issues-and-pull-requests`: This REST API call lets you search for specific issues and pull requests to retrieve all information related to them across all repositories you have permission to access based on their state (e.g. open or closed) and keywords.\n\nAPI permissions:\n\n- `repo`: Grants full access to public and private repositories. This scope includes `repo:status`, `repo_deployment`, `public_repo`, `repo:invite`, `security_events`, `administration`, `read:org`, `write:org`, `read:public_key`, `write:public_key`, `read:gpg_key`, `write:gpg_key`, `gist`, `workflow`, and `codespace`.\n\n### GitLab\n\nThe GitLab tool can use the following REST API calls on your behalf when you\nprompt it from the Gemini Code Assist chat:\n\n- `ListProjects`: Retrieves a list of projects for the current user.\n- `ListIssues`: Retrieves a list of issues for a specified project.\n- `CreateIssue`: Creates a new issue in a specified project.\n- `ListMergeRequests`: Retrieves a list of merge requests for a specified project.\n- `ListMergeRequestPipelines`: Retrieves a list of pipelines for a specified merge request.\n\nAPI permissions:\n\n- `read_api`: Grants read-only access to the authenticated user's API.\n- `read_repository`: Grants read-only access to the repository.\n- `read_user`: Grants read-only access to the authenticated user's profile information.\n- `api`: Grants complete read/write access to the authenticated user's API.\n\n### Google Docs\n\nThe Google Docs tool can use the following REST API calls on your behalf when\nyou prompt it from the Gemini Code Assist chat:\n\n- `ListFiles`: Retrieve a list of files in the user's Google Drive based on a given query or filters.\n- `Export`: Export the contents of a Google Doc in order to inspect its contents. If the user is asking for any information that may be contained within a given file, this is the REST API that should be called.\n\nAPI permissions:\n\n- `drive.readonly`: Allows read-only access to your Google Drive files, including all files you own and files have access to.\n\n### Sentry\n\nThe Sentry tool can use the following REST API calls on your behalf when you\nprompt it from the Gemini Code Assist chat:\n\n- `organizations`: Return the current `organization_id_or_slug`.\n- `getIssue`: Return details on an individual issue. This returns the basic stats for the issue (title, last seen, first seen), some overall numbers (number of comments, user reports) as well as the summarized event data.\n- `transactions`: Return a list of transactions affected by an issue\n- `issues`: Return a list of issues and errors assigned for the given organization and project.\n\nAPI permissions:\n\n- `event:read`: Allows reading events.\n- `projects.read`: Allows reading project-related information.\n- `org.read`: Allows reading organization-related information.\n\n### Atlassian Rovo\n\nThe Atlassian Rovo tool can use the following REST API calls on your behalf when\nyou prompt it from the Gemini Code Assist chat:\n\n- `completions`: Send a request to Atlassian Rovo in OpenAI format (a list of chat messages)\n\nAPI permissions:\n\n- `rovo`: Grants access to Atlassian Rovo in the user's account.\n\n### MongoDB\n\nThe MongoDB tool tool can use the following REST API calls on your behalf when\nyou prompt it from the Gemini Code Assist chat:\n\n- `createConversation`: This chatbot can answer any question about databases or MongoDB, provide examples of code, explain topics, etc. This operation initializes the conversation.\n- `addMessage`: This chatbot can answer any question about databases or MongoDB, provide examples of code, explain topics, etc. This operation adds a new message to the conversation.\n\nAPI permissions:\n\n- Not user-authenticated. Accesses the general MongoDB docs chatbot.\n\n### New Relic\n\nThe New Relic tool can use the following REST API calls on your behalf when you\nprompt it from the Gemini Code Assist chat:\n\n- `completions`: Endpoint to send user prompts to New Relic AI and receive responses\n\nAPI permissions:\n\n- Access to New Relic's AI endpoint for the user's account.\n\n### Redis\n\nThe Redis tool can use the following REST API calls on your behalf when you\nprompt it from the Gemini Code Assist chat:\n\n- `chat`: Endpoint to send user prompts to Redis AI and receive responses\n\nAPI permissions:\n\n- Not user-authenticated. Accesses the general Redis chatbot.\n\n### Neo4j\n\nThe Neo4j tool can use the following REST API calls on your behalf when you prompt\nit from the Gemini Code Assist chat:\n\n- `invoke`: Endpoint to send user prompts to Neo4j AI Chatbot and receive responses\n\nAPI permissions:\n\n- Not user-authenticated. Accesses the general Neo4j docs chatbot.\n\n### Snyk\n\nThe Snyk tool can perform the following operations on your behalf when you\nprompt it from the Gemini Code Assist chat:\n\n- `/scan`: Fetches vulnerability logs from Snyk Extension\n- `/scan new`: Fetches latest vulnerability logs\n\nWhat's next\n-----------\n\n- Read [Gemini Code Assist: Terms of Service and Privacy Policies](/gemini-code-assist/resources/privacy-notices).\n- Learn more about [how Gemini Code Assist works](/gemini-code-assist/docs/works)."]]