Hermoso is a marketing MCP server: 850+ tools over one OAuth’d endpoint that let an agent research the ads already running in a market, generate finished image and video ads, publish them, and build the paid campaigns behind them. Gemini CLI reaches all of it through one connection. This page is about one slice of that — what Gemini CLI can actually do on Bluesky, and what Bluesky will not let it do.
Connect Hermoso to Gemini CLI
- Install the extension.
It installs the latest release of Hermoso’s public repository: five skills (research, ad-from-brand, generate, product-photoshoot and marketing) plus agemini extensions install https://github.com/hermoso-ai/hermosoGEMINI.mdcontext file. The skills run thehermosocommand throughnpx, so nothing is added to Gemini CLI’s tool list and nothing costs context until a command runs.gemini extensions listshows them under Agent skills. - Sign in once.
It opens a browser sign-in and stores an owner-only credential innpx -y hermoso auth login~/.hermoso/config.json. Gemini CLI can run it for you the first time it needs Hermoso. No browser on that machine? Create a key under MCP & CLI → Terminal & API keys and runnpx -y hermoso auth login --token hmk_…. - Optional: the MCP server as well.
Gemini CLI finds Hermoso’s authorization server when the first connection answers 401 and registers itself, so no key goes ingemini mcp add --scope user --transport http hermoso https://app.hermoso.ai/mcpsettings.json;/mcp auth hermosoinside a session runs the sign-in. The skills reach every tool without it. - Ask Gemini CLI for something. “Pull my three closest competitors’ longest-running ads and remix the best hook into a 9:16 video,” or “post this render to the channel.” The agent picks the tools; you approve the spend.
We ran the install above on 2026-09-23 against Gemini CLI 0.60.0 in a clean home directory: it pulled the current release of hermoso-ai/hermoso, and gemini extensions list reported the five skills and the context file. The extension carries no MCP server of its own, which is deliberate: a tool list is loaded into every session, and skills cost nothing until they run. Hermoso is not affiliated with or endorsed by Google.
Then connect Bluesky itself, once, under Settings → Connectors in Hermoso, with your handle and a Bluesky app password. There is no consent screen: the app password is made in Bluesky’s own settings, and it can be revoked there without touching your real password.
The Bluesky tools Gemini CLI gets
post_to_bluesky— publishes a post as the connected account: up to 300 characters, with up to four images and alt text, or one MP4 video with optional caption tracks. A link with no media gets a preview card, which Hermoso builds because Bluesky does not fetch one.schedule_post— queues it on the calendar every other channel shares, with the 300-character cap checked when it is queued rather than when it fires.list_bluesky_posts— the account’s own recent posts with their AT-URIs and live counts, marking reposts so someone else’s post is never read as yours.bluesky_post_metrics / bluesky_account— likes, reposts, replies, quotes and bookmarks per post, and followers, following and post count for your account or any public one.list_bluesky_convos / read_bluesky_dm / send_bluesky_dm— read and answer direct messages, including message requests from people the account does not follow.manage_bluesky_convo / react_to_bluesky_dm / mark_bluesky_convo_read— accept a request, mute, lock or leave a conversation, react with one emoji, and clear unread counts.delete_bluesky_post— removes a post, after a first call that deletes nothing and reads back what would go.
Bluesky connects with an app password rather than a sign-in screen: create one in Bluesky’s settings and paste it with the handle under Settings → Connectors. Tick direct-message access when you create it, or the DM tools will tell you the password cannot chat, which is a property of the password and not a broken connection. Two more Bluesky rules Hermoso checks before sending: a video needs a confirmed email on the Bluesky account, and a link card and an image cannot share a post. Publishing costs no credits, because Bluesky charges nothing per call.
Bluesky limits worth knowing before you automate anything
| Text | A Bluesky post is capped at 300 characters and, separately, at 3,000 bytes, so an emoji-heavy post can be under 300 characters and still too long. It is enforced when the post is created or queued — refused while you are still there to fix it, rather than silently cut on the way out. |
|---|---|
| Visibility | Public only. A Bluesky post is a public record on the AT Protocol, and there is no unlisted, private or draft form of one. The review happens before the call, never after it. |
| Carousel | 2 to 4 images, images only. Four is Bluesky’s own number, from the AT Protocol lexicon for an image embed, and a fifth is refused rather than dropped. A video is a different embed that carries exactly one clip, and a post has a single embed, so a Bluesky post is images, one video or a link card: one of the three. |
| Which account | None, unless the brand has connected more than one Bluesky account. Then account names which, and several with none named is refused by name rather than guessed. |
Try it in Gemini CLI
Ask for it in ordinary language — these are sentences, not a DSL:
“Post a Bluesky update under 300 characters about today’s release with ./assets/release.png attached and alt text written, then print the post URL.”
That walks get_brand → generate_image → post_to_bluesky → bluesky_post_metrics. Gemini CLI asks before it runs a shell command, and the skills act through the hermoso command, so a publish shows up as a line you can read before you say yes. For MCP tools it offers once, always for that tool, or always for the server.
Gemini CLI on Bluesky: the part that bites
Bluesky connects with an app password, not a sign-in screen. Create one in Bluesky’s settings and paste it under Connectors in Hermoso; an agent can also do it with connect_connector, but a password typed into a session stays in its history. Tick direct-message access when you create it if you want the DM tools. A password without it can post but not chat.
Two Gemini CLI details decide how safe this is. gemini mcp add writes to the project’s .gemini/settings.json unless you pass --scope user, which is useful when one repo should always run against one brand. And never add Hermoso with --trust: it skips every confirmation for the server, including the ones in front of a publish. MCP tools arrive named mcp_hermoso_ plus the tool name, and --exclude-tools keeps any of them out entirely.
Research Bluesky before you post
There is no Bluesky ad library and no Bluesky search in Hermoso, so competitor research there comes down to one honest thing: bluesky_account reads any public account’s followers, following and post count, which is enough to size a competitor and chart it week by week. Everything else in the research surface (the Meta, Google and LinkedIn ad libraries, organic TikTok, Instagram, YouTube, Reddit and Threads) is unaffected.
The paid half
There is no Bluesky ads product in Hermoso, and we do not imply one. Bluesky here is organic: publish, schedule, read, reply and measure. The paid tools cover Meta, Google Ads, Microsoft Advertising, Reddit Ads, LinkedIn, Pinterest, X Ads, TikTok Ads, Snapchat Ads, ChatGPT Ads and Apple Search Ads.
What Gemini CLI cannot do on its own
An agent with a budget is only useful if the blast radius is bounded, so the fence is in the server rather than in a prompt. Every ad campaign, ad set, ad group and ad is created paused, and the status switches that arm real money refuse to run without an explicit confirmation flag. Every render is quoted first — hermoso_capabilities publishes each model’s exact credit cost before anything spends — and credits are reserved before the first provider call and settled at the exact cost afterwards, so a failed dispatch refunds rather than leaving you billed for nothing. Deletes are confirm-gated too, and every campaign tree is read back from the ad platform before your agent tells you what it built.
One step is deliberately yours: creating the Bluesky app password and connecting it once. Everything after that is a tool call.
The rest of the matrix
From Gemini CLI, post to: Facebook · Instagram · Threads · TikTok · YouTube · X · LinkedIn · Pinterest · Telegram — or see everything Gemini CLI can publish to.
Post to Bluesky from: Claude · ChatGPT · Claude Code · Cursor · Codex · Cline · OpenClaw · Grok Bot · Hermes · Perplexity · Le Chat
Frequently asked questions
Can Gemini CLI post to Bluesky?
Yes, with Hermoso's Gemini CLI extension. Run gemini extensions install https://github.com/hermoso-ai/hermoso, which adds five Hermoso skills that drive the hermoso command, then sign in once with npx -y hermoso auth login. The sign-in opens a browser and stores the credential itself, so there is no key to create and none to paste. If you also want Hermoso's tools in Gemini CLI's own list, gemini mcp add --scope user --transport http hermoso https://app.hermoso.ai/mcp adds the hosted server, which signs in with OAuth. Gemini CLI then has 850+ tools, including the ones that publish to Bluesky — and the ones that research the ads already running in your market and render the creative in the first place.
How do I connect Bluesky to Gemini CLI?
Two steps, once each. Run gemini extensions install https://github.com/hermoso-ai/hermoso, which adds five Hermoso skills that drive the hermoso command, then sign in once with npx -y hermoso auth login. The sign-in opens a browser and stores the credential itself, so there is no key to create and none to paste. If you also want Hermoso's tools in Gemini CLI's own list, gemini mcp add --scope user --transport http hermoso https://app.hermoso.ai/mcp adds the hosted server, which signs in with OAuth. Then create an app password in Bluesky's settings (tick direct-message access if you want the DM tools) and paste it with your handle under Settings → Connectors in Hermoso. After that Gemini CLI publishes to Bluesky as an ordinary tool call.
Can Gemini CLI post a carousel to Bluesky?
Up to a point: 2 to 4 images, images only, which is the limit in Bluesky’s own lexicon. A video goes up as its own post, one clip per post, because a Bluesky post carries a single embed. Gemini CLI calls the same publish tool either way, and a channel that cannot carry a carousel is refused with the real reason attached.
Can Gemini CLI run Bluesky ads as well as posting?
No. There is no Bluesky ads product in Hermoso. Bluesky here is organic: publish, schedule, read engagement, and handle replies and DMs.
Start free — 30 credits at signup and 250+ more to earn, and every feature on every plan. Credits are spent only on AI models and Ad Spy research; posting, scheduling, ads management and analytics are free.
Start free → See pricing