Skip to main content
Connect hosts to the canonical Streamable HTTP /mcp URL supplied by your Praxa Integration Gateway deployment. The examples use https://gateway.example.com/mcp as a placeholder; replace it only with an approved deployment URL. A successful configuration entry does not prove OAuth, scope, tenant policy, or tool execution.

Before you configure a host

  1. Obtain the exact HTTPS endpoint and supported OAuth flow from the deployment owner.
  2. Inventory the aura_* tools the workflow actually needs.
  3. Separate safe reads from mutations and destructive cancellation.
  4. Decide which calls require human approval in the host.
  5. Use a disposable user and tenant for initial testing.

Claude Code

Open Claude Code and run /mcp to complete OAuth when the server requests it. Use project scope only when the shared configuration contains no credential. Review the server before accepting project trust.

Cursor

Create .cursor/mcp.json for a project-scoped remote server:
Use Cursor’s MCP settings or cursor-agent mcp login praxa for OAuth, then run cursor-agent mcp list-tools praxa. Keep auto-run disabled for mutations until approval, replay, and negative authorization tests pass.

Visual Studio Code

Create .vscode/mcp.json:
Run MCP: List Servers, start praxa, review the trust prompt, and inspect the MCP output log. Do not hardcode OAuth tokens in a committed workspace file. Enterprise administrators should allowlist the exact server and preserve tool approval policy.

OpenAI Responses API

Your trusted backend can provide a short-lived delegated token to the remote MCP tool. Keep approval required and allowlist only the tools needed for the request.
The application owns the OAuth flow and token lifecycle. Data sent through a remote MCP tool is also subject to that server deployment’s retention and residency policy.

Any other MCP 2025-11-25 host

Configure one Streamable HTTP endpoint and negotiate the lifecycle before listing or calling tools. On JSON-RPC POST requests, advertise both application/json and text/event-stream; on a listening GET, advertise text/event-stream. Preserve the negotiated MCP-Protocol-Version on later requests. If initialization returns MCP-Session-Id, send it on every later request, start a new initialization after a session-scoped 404, and terminate the session with DELETE when the server supports it. Use OAuth Protected Resource Metadata discovery instead of a static bearer header unless the deployment explicitly documents another mode.

Verify every host

For exact commands and UI paths, follow the host’s current official MCP guide; host configuration formats can evolve independently of Praxa contracts.

Official host references

Last modified on August 14, 2026