Skip to main content
The StackOne MCP server turns the actions on your Linked Accounts into tools that any client supporting the Model Context Protocol (MCP) can call.

​
The server URL

Everyone uses the same URL in their client:
The URL grants no access by itself, so you can publish it in an internal wiki or helpdesk article. Each person who adds it signs in to StackOne and chooses which of their Linked Accounts the client can reach. The client receives tools, and provider credentials stay in StackOne.
Most clients open a sign-in prompt as soon as the server is added, and some wait until the first tool call. See Client setup (OAuth) for popular clients.

​
What the user sees

Authorization happens in the StackOne dashboard, against the user’s own login. Sign in, pick a project, select the Linked Accounts the client should reach, then Authorize. The granted accounts and actions become the client’s tool list. Selecting an account grants every action enabled on its Connector Profile. Expanding an account narrows the grant to individual actions. The same screen carries the Load tools when needed toggle, which puts the connection into Advanced Tool Search. It is on by default. Under the client’s logo, the screen shows where the connection returns after you approve, such as Returns to claude.ai. For a client that publishes its own details, such as Claude Code or VS Code, it also shows the domain it came from. Check that both match the client you are connecting. Any program on your device can catch a sign-in that returns to localhost or to an app on it, so only continue if you started the connection yourself, from that client.
StackOne authorization screen listing organizations, with a project selected inside one of them

Pick a project

StackOne authorization screen showing two linked accounts, Linear and Open-Meteo, both selected, above the Load tools when needed toggle

Select accounts

An expanded linked account showing individual actions with toggles, descriptions, and category tags

Narrow the actions

Each client guide under Client setup (OAuth) walks through every screen.

​
Who can grant access

Users typically hold the Project Member role, which is what the flow is built around. A Project Member sees the accounts they linked themselves, plus any they have been added to. That is what makes one URL safe to publish across an organization. Access can also be granted on a single Linked Account, which is how a shared account (a service mailbox, a company CRM login) reaches someone who is otherwise only a Project Member. Each person added to an account gets one of two levels:

​
Choosing a connection method

There are two ways to connect a client:

​
Client setup (OAuth)

OAuth is the recommended way to connect. Each person authorizes with their own StackOne login, and their grant can be revoked at any time. Here are step-by-step guides for some of the most popular clients:

ChatGPT

Claude Code

Claude Desktop & Web

Codex (OpenAI)

Cursor

Gemini CLI

Glean

Goose

n8n

VS Code (Copilot)

Here are guides for other clients:

​
Clients requiring Client ID and Secret

Most clients identify themselves to StackOne automatically, which is why the URL is usually the whole configuration. Claude Code and VS Code publish their details at an address StackOne reads, and other clients, including Cursor, register on first connect. A few sign in from a fixed, hosted callback address instead and cannot self-register. Those need a client created in the dashboard first, and you paste its credentials into the client.
1

Create the client

Go to Project Settings → MCP OAuth Clients → Create OAuth Client. Give it a descriptive name, leave Client type set to Confidential, and add one redirect URI per line. This is the callback address the client returns to after sign-in, which the client’s own documentation states.The Common integrations picker fills the redirect URI in for the clients we have confirmed:Redirect URIs must be https or a loopback address.
2

Copy the credentials

Generate returns the client ID and secret. The secret is shown only once, so store it before you close the panel. If it is lost, create a new client rather than trying to recover it.
3

Configure the client

Paste the credentials into the client along with the endpoints shown beside them:Then run the flow. The consent screen is the same one every other client shows, and Who can grant access applies unchanged.
Clients that currently need this:
Access tokens last one hour and are renewed automatically using the offline_access refresh token. The grant itself lasts 90 days, after which the user runs the flow again. Revoking under Connected Apps ends it immediately.

​
Client not listed?

Any MCP client that speaks the Streamable HTTP transport and supports OAuth can connect. Point it at https://mcp.stackone.com/mcp and let it run the flow. If a client cannot open a browser for someone to approve the prompt, use a session token instead.

​
Reviewing and revoking access

Every authorization is a grant against the user who approved it, not against a project API key. Users manage their own grants under Connected Apps in the dashboard, where revoking one immediately stops that client’s tool calls. Revoking access does not unlink the account or change the Connector Profile. The account keeps working for every other client.

​
Client setup (session token)

Session token URLs cover the cases OAuth cannot: a shared server, a scheduled job, or anywhere nobody is present to approve a prompt. The trade-off is that the access is built into the URL itself, so one leaked link exposes the account it was minted for.
Generate one from Connectors, open a connector, then Use in Agent. Pick a linked account, set the expiry (one year by default), and copy the URL. Everything above is for clients your users run themselves, each signing in with their own StackOne login. To call the MCP server from your own product instead, with your API key and an account ID per end-user, see MCP in the Embed tab.

​
Optimize and secure

With your agent connected, use StackOne’s platform features to optimize performance and secure every call.

Advanced Tool Search

Reduce context and save tokens.

Deep Query

Search synced records for a fraction of the tokens.

Defender

Block prompt injections before they reach your agent.