Setup steps
1
Open the MCP page
Console → MCP (
/mcp).2
Copy the client configuration
Pick your client (Cursor / Claude / VS Code, etc.) and copy the generated JSON snippet into the client’s MCP configuration.
3
OAuth authorization
When the client connects, it automatically opens the browser to complete OAuth 2.1 + PKCE authorization — no manual token entry.
4
Start asking
Tools and permissions
The MCP page lets you toggle tools individually. Read tools are enabled by default; write tools are disabled by default and must be explicitly enabled.Endpoint and protocol
- Transport: Streamable HTTP MCP (protocol 2026-07-28)
- Dual-era: the same endpoint serves modern clients (no handshake,
server/discover) and legacyinitializeclients on 2025-11-25 and earlier - Auth: OAuth 2.1 + PKCE. Prefers Client ID Metadata Documents; Dynamic Client Registration remains as a compatibility fallback. Authorization-code redirects include RFC 9207
iss(skipped inFORGE_NO_AUTH=1local debugging mode)
/mcp