Organization MCP endpoint
Add remote connectors once in the console. The gateway serves them to every managed tool at
https://<gateway>/mcp/org.
Connectors that need no sign-in are shared across the organization. OAuth connectors use the calling developer's personal grant. Desktop built-ins and local commands stay in Claude Desktop.
Set it up
Open the account menu, select Connectors, choose Add, and search by name. For
anything not listed, paste the server's http or sse address.
The gateway asks the server for its name and tools before saving it. A server that answers openly is ready for everyone. A server that requires sign-in is saved once, then each developer authorizes it with their own account.
URL-only MCP clients sign in through the same WorkOS organization as the console. If the organization has not connected its identity provider, follow Enterprise SSO enrollment. Sign-in opens once Anyray registers this gateway's address. Requiring SSO in the organization policy is recommended hardening on top, not something sign-in waits for.
Connect-managed tools use the developer's existing ark_ key and need no extra sign-in for
the organization endpoint.
This lane needs the organization's WorkOS SSO. Without it the gateway returns 401 naming the
client key and advertises no sign-in, so a URL-only client fails once and says so instead of
looping through a login it cannot finish. Connect-managed tools are unaffected either way.
The gateway keeps the model prefix unchanged by default. Turn on the Postgres-backed runtime switch when you are ready to expose the sign-in tool:
curl -X PUT https://gateway.example.com/admin/v1/settings \
-H "Authorization: Bearer $ANYRAY_ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"mcpConnectTool":true}'
Set the value back to false to remove the tool immediately after the settings cache refreshes.
Open the account menu and select Connectors. The Organization MCP endpoint panel reports the connector, organization sign-in, and developer endpoint states separately. Every step green means a developer can add the endpoint and sign in.
The panel names whose move it is. Steps owned by Anyray ask the admin for nothing.
What developers do
Connect-managed tools need no manual setup. Connect writes the endpoint with the developer's key. In another URL-based MCP client, add the endpoint and no custom header:
https://gateway.example.com/mcp/org
Copy the exact URL from the console. The client discovers AuthKit and asks the developer to sign in
with the organization's SSO. A deployment whose address Anyray has not registered has no sign-in at
all: it returns 401 naming the client key, advertises no authorization server, and answers 404 on
both discovery documents, so a client stops instead of retrying.
When at least one connector needs a vendor account, tools/list shows one gateway-owned tool named
anyray_connect. The tool stays the same however many connectors are waiting.
Call it with no arguments to list the connectors waiting for this developer. Call it with a connector to start one sign-in:
{"connector":"Atlassian"}
Open the returned URL and finish vendor consent. The callback shows a short claim code. Give that code back to the assistant with the same connector:
{"connector":"Atlassian","claim":"ABCDEFGHJKLM"}
The claim is single-use and expires after five minutes. Redemption binds the grant to the verified
developer making this call, regardless of who started the browser flow. The tool refuses to start or
redeem while that developer already has a usable grant, so it cannot replace a working connection.
Refresh the client's tool list after redemption. A client that caches tools may need to reconnect
because /mcp/org has no server-push response stream.
The command-line flow remains available:
npx anyray-connect connectors authorize "Atlassian"
The command opens the vendor consent page and reports the account that received the grant. Over
SSH, run it again with --claim <code>. This CLI lane stays unbound until the verified client
redeems the code. The console's Authorize action uses the same claim-code flow.
Until the grant lands, the connector's real tools stay out of tools/list. Calling a remembered
real tool name returns HTTP 200 with an MCP tool result marked isError: true. The result names
the connector and points to anyray_connect while the switch is on. It does not start authorization.