In a fuel cell assembly, nickel-based anodes are readily oxidized when exposed to oxygen as may happen through atmospheric invasion of the assembly during cool-down following shutdown of the assembly. Repeated anode oxidation and reduction can be destructive of the anodes, leading to cracking and failure. To prevent such oxygen migration, oxygen getter devices containing oxygen-gettering material such as metallic nickel are provided in the fuel passageways leading to and from the anodes. Oxidation of the oxygen-gettering material is readily reversed through reduction by fuel when the assembly is restarted.