{"mcpResource":"https://kumiau.com/mcp","oauthIssuer":"https://kumiau.com","addressToken":"{{KUMIAU_MCP_ADDRESS}}","verificationTool":"get_connection_status","recipes":[{"clientId":"claude-code","label":"Claude Code","capabilityClass":"self-configuring","tagline":"Self-configuring CLI — add, then sign in from the connector list.","command":"claude mcp add --transport http kumiau {{KUMIAU_MCP_ADDRESS}}\n# then, in session:  /mcp      or from a shell:  claude mcp login kumiau\n# headless/SSH:      claude mcp login kumiau --no-browser","lastVerifiedAt":"2026-08-08","sourceLabel":"code.claude.com/docs/en/mcp","limitations":["Claude Code auto-detects the 401/403 challenge and completes RFC 9728 → RFC 8414 discovery plus dynamic client registration itself — no deeplink exists for this client."],"fallbackInstructions":"Add a remote MCP server named \"kumiau\" pointing at {{KUMIAU_MCP_ADDRESS}}, then sign in from Claude Code's connector list (/mcp) or run its login command from a shell."},{"clientId":"gemini-cli","label":"Gemini CLI","capabilityClass":"self-configuring","tagline":"Self-configuring CLI — needs a local browser to finish sign-in.","command":"gemini mcp add --transport http kumiau {{KUMIAU_MCP_ADDRESS}}\n# then, in session:  /mcp auth kumiau","lastVerifiedAt":"2026-08-08","sourceLabel":"github.com/google-gemini/gemini-cli docs/tools/mcp-server.md","limitations":["Requires a local browser and a localhost OAuth callback — it will not complete in a headless SSH session or container.","authProviderType defaults to dynamic_discovery; leave it unset rather than configuring it explicitly."],"fallbackInstructions":"Add a remote MCP server named \"kumiau\" pointing at {{KUMIAU_MCP_ADDRESS}}, then run Gemini CLI's in-session auth command against it. A local browser is required to finish sign-in."},{"clientId":"codex-cli","label":"Codex CLI","capabilityClass":"self-configuring","tagline":"CLI add command — the OAuth resource line below is required, not optional.","command":"codex mcp add kumiau --url {{KUMIAU_MCP_ADDRESS}}\ncodex mcp login kumiau\n\n# config.toml — Codex documents this field as optional with no stated\n# default. Kumiau requires it on every authorization request, so add it\n# explicitly if login fails after the commands above:\n[mcp_servers.kumiau]\nurl = \"{{KUMIAU_MCP_ADDRESS}}\"\noauth_resource = \"{{KUMIAU_MCP_ADDRESS}}\"","lastVerifiedAt":"2026-08-08","sourceLabel":"learn.chatgpt.com/docs/extend/mcp?surface=cli","caveat":"Kumiau requires the OAuth resource parameter on every authorization request. Codex's docs list oauth_resource as optional with no stated default — treat the config.toml block below as required, not optional, or sign-in can fail without a clear error.","limitations":["There is no --oauth flag for Codex CLI — the upstream request for one (openai/codex#23846) is open and unmerged. Do not look for one.","Whether `codex mcp add --url` alone ever populates the resource correctly is unconfirmed — add the config.toml block explicitly rather than relying on it."],"fallbackInstructions":"Add Codex's MCP server config for \"kumiau\" pointing at {{KUMIAU_MCP_ADDRESS}}, and set oauth_resource to the same address in config.toml — Kumiau's OAuth server requires it even though Codex marks it optional."},{"clientId":"cursor","label":"Cursor","capabilityClass":"self-configuring","tagline":"One-click install link — verify sign-in completes after installing.","command":"cursor://anysphere.cursor-deeplink/mcp/install?name=kumiau&config=$BASE64_JSON\n# $BASE64_JSON = base64 of {\"url\":\"{{KUMIAU_MCP_ADDRESS}}\"}","lastVerifiedAt":"2026-08-08","sourceLabel":"cursor.com/docs/mcp/install-links","limitations":["The deeplink format above is confirmed by Cursor's docs. Whether installing it automatically triggers the OAuth sign-in Kumiau requires — or needs a manual step afterward in Cursor's MCP settings — is not confirmed; check that a connection actually completes before relying on it."],"fallbackInstructions":"In Cursor's MCP settings, add a server named \"kumiau\" with URL {{KUMIAU_MCP_ADDRESS}}, then complete the sign-in prompt Cursor shows. If it does not prompt automatically, look for a connect/sign-in action next to the new server entry."},{"clientId":"claude-web-desktop","label":"Claude (web/desktop)","capabilityClass":"connector-capable-web","tagline":"Paste the address into Connectors — Claude drives the OAuth prompt.","command":"Settings → Connectors → Add custom connector\nURL: {{KUMIAU_MCP_ADDRESS}}\nLeave the OAuth application fields blank — Kumiau registers the connection automatically.","lastVerifiedAt":"2026-08-08","sourceLabel":"claude.com/docs/connectors/custom/remote-mcp","limitations":["Team/Enterprise workspaces: an org Owner must add the connector first; members then connect individually.","Free tier is limited to one custom connector at a time."],"fallbackInstructions":"In Claude's Connectors settings, add a custom connector with URL {{KUMIAU_MCP_ADDRESS}} and leave its OAuth application fields blank, then follow the sign-in prompt Claude shows."},{"clientId":"chatgpt-web-desktop","label":"ChatGPT (web/desktop)","capabilityClass":"connector-capable-web","tagline":"Custom connector UI — exact click-path not yet confirmed.","command":null,"lastVerifiedAt":"PENDING","limitations":["The exact Developer Mode click-path is unconfirmed: available sources disagree between a Settings → Security and login route and a Settings → Apps → Advanced settings route.","Plan-tier gating for write-capable connectors (Kumiau's publish_revision and reply_feedback tools need write access) is confirmed for Business/Enterprise/Edu; Plus/Pro is unconfirmed."],"fallbackInstructions":"Look for a custom or developer MCP connector option in ChatGPT's settings, add one pointing at {{KUMIAU_MCP_ADDRESS}}, and complete the sign-in prompt it shows. Exact menu wording varies by plan and has changed recently — search ChatGPT's own help center if you don't see it."},{"clientId":"generic-mcp","label":"Another MCP client","capabilityClass":"generic-remote-mcp","tagline":"Standards-only baseline — works if your client follows the MCP auth spec.","command":null,"lastVerifiedAt":"PENDING","sourceLabel":"modelcontextprotocol.io/specification/2025-11-25/basic/authorization","limitations":["Authorization is optional in the MCP spec, so \"supports MCP\" alone is not evidence a given client will complete Kumiau's OAuth flow — verify per client."],"fallbackInstructions":"Point your client at {{KUMIAU_MCP_ADDRESS}}. A spec-compliant client should follow: a 401/403 challenge, RFC 9728 protected-resource discovery, RFC 8414 authorization-server discovery, Client ID Metadata or RFC 7591 dynamic registration, PKCE with S256, the exact resource on both the authorization and token requests, and its access token in the Authorization request header (never a query string) on every call to Kumiau."}]}