The transport is POST-only;
GET returns 405 and compliant clients fall back to POST.
Auth supports per-brand API keys and configured OAuth access. Use a connection scoped to
the intended tenant and operations; reserve global admin credentials for platform administration.
Inspect the tools and input schemas exposed by your actual connection.
Tools
apply_config requires a change_note and expected_config_version for optimistic
concurrency — so two people editing the same brand can’t silently overwrite each other.
Onboarding and operating tools
Use the HTTP transport for operations that delegate to REST handlers; those tools are not
available through local
mcp-stdio. Tool availability remains subject to authorization.
For unattended config changes, set require_golden_pass: true on apply_config and stop on
failed evaluations or version conflicts. Activating a shadow brand does not switch it to live
routing. See the trial walkthrough.
Follow Your First Workflow Configuration Change for
candidate validation, evaluation, full-object apply, and independent read-back.
The natural loop
1. Mint a per-brand API key
2. Connect from Claude
Claude Code
List the brands I can access. For the brand I select, read its config, scorecard, and recent runs. Propose one improvement supported by that evidence; do not apply it or change routing.
Claude Desktop
Bridge the remote HTTP server to stdio:Scoping
Prefer a per-brand key over an admin key. The brand key confines every tool call to that brand’s tenant, so a mistakenapply_config cannot reach another customer’s configuration.
Related
- Control plane — the versioned config pipeline behind
apply_config - Configuration — what lives in
deterministic_config - Workflow Studio — the UI equivalent
- All MCP servers