Source checked: 2026-07-24 Protocol source: https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization
Use this guide for a client without a dedicated Core setup page.
During onboarding, paste the complete Secure server address shown by Core. It ends in /mcp/continuity?setup_attempt=...; keep the query parameter so Core can verify the connection. Outside onboarding, use https://core.gradien.ai/mcp/continuity.
Add Core
- Add Core as a remote Streamable HTTP MCP server.
- Use OAuth and let the client discover authorization through Core's protected-resource metadata.
- Complete browser consent.
- Verify MCP initialize and tools/list.
OAuth protected-resource metadata: https://core.gradien.ai/.well-known/oauth-protected-resource/mcp/continuity
The /mcp endpoint exposes Core's broader advanced server. Use /mcp/continuity for the personal-context experience described in onboarding.
Use a personal, scoped, revocable connector key only when the client cannot complete OAuth and the user deliberately approves a local secret fallback.