Skip to main content
Every client uses the same address, https://mcp.squarecloud.app/mcp. How it signs in depends on the client: Your account needs an active plan in both cases.

​
Claude

1

Add a custom connector

In Claude, open Customize > Connectors, click + Add and then Add custom connector. On Team and Enterprise plans, an Owner adds it first under Organization settings > Connectors (Add > Custom > Web), and each member then connects it from Customize > Connectors.
2

Enter the address

Name it Square Cloud, enter https://mcp.squarecloud.app/mcp and click Continue.
3

Keep Claude's own identity

Keep a sign-in option (Sign in now or Sign in when needed) and, as the OAuth client, Use Claude’s published identity (Recommended). Leave Request headers empty and click Add.
4

Authorize on Square Cloud

Claude opens a Square Cloud page. Sign in if needed, review the permissions Claude asks for and click to authorize. You can uncheck permissions to give Claude less access; mcp always stays, since it is what connects.
5

Use it in a chat

Back in Claude, click + in the chat box, open Connectors and turn Square Cloud on.
Square Cloud only accepts Claude’s published identity. Register automatically and Use your own OAuth client don’t work with it.

​
ChatGPT

1

Add a custom MCP server

Open ChatGPT Plugins, select + and then Add custom MCP server. Depending on your ChatGPT plan, a workspace admin may need to allow custom MCP servers first.
2

Enter the address

Name it Square Cloud, choose the public endpoint as the connection and enter https://mcp.squarecloud.app/mcp. Choose OAuth for authentication.
3

Create it

Review the warning, select I understand and want to continue and then Create as a plugin.
4

Authorize on Square Cloud

When ChatGPT asks you to sign in, it opens a Square Cloud page. Sign in if needed, review the permissions and click to authorize. You can uncheck permissions; mcp always stays.
5

Use it in a chat

Start a new conversation, type @ and pick Square Cloud.
ChatGPT changes the names of these menus from time to time. If they differ, follow OpenAI’s guide to connecting an MCP server.

​
Claude Code

Claude Code connects with an API key in a header, not with OAuth. Store the key in the SQUARECLOUD_API_KEY environment variable and run:
Your shell fills in the key when you run the command, and Claude Code saves it in its own configuration. To share the server with a project without sharing the key, add it to the project’s .mcp.json instead; Claude Code reads the variable each time it starts:
.mcp.json
Check the connection with claude mcp list, or with /mcp inside Claude Code.

​
VS Code

Add the server to .vscode/mcp.json in your project, or to your user configuration with MCP: Open User Configuration from the command palette:
.vscode/mcp.json
VS Code asks for the API key when the server starts, so it never sits in the file. Start, stop or restart the server with MCP: List Servers.
This is separate from the Square Cloud extension for VS Code, which manages your applications from the side bar. You can use both.

​
Cursor

Add the server to .cursor/mcp.json in your project, or to ~/.cursor/mcp.json for every project:
.cursor/mcp.json
Set SQUARECLOUD_API_KEY in your environment before opening Cursor. Turn the server on in Cursor’s Customize menu; if it doesn’t connect, the MCP Logs channel of the Output panel shows why.

​
Other clients

Any client that supports remote MCP servers over Streamable HTTP with a custom header works the same way: use the address https://mcp.squarecloud.app/mcp and send the API key in the Authorization header. The Bearer prefix is optional.

​
Create an API key

Create the key in your account security settings:
  • Give it the mcp scope, plus the scopes of the tools you want the client to use. A full-access key also works. See Scopes.
  • For read-only access, choose mcp, apps:read, files:read, envs:read, snapshots:read and databases:read.
  • To limit the client to some applications and databases, restrict the key to them. See Restricted keys.
The secret is shown only once. Keep it in an environment variable or in your client’s secret storage, never in a chat or a file you commit. Keys you create don’t expire: revoke the key when you stop using it. An account holds up to 10 keys.

​
How long a connection lasts

Claude and ChatGPT (OAuth). Authorizing creates an API key for that client, named after it (Claude or ChatGPT):
  • It lasts 90 days and has no refresh token. When it expires, the client asks you to sign in and authorize again.
  • It only works on the MCP server. On the REST API it answers 403 MISSING_SCOPE.
  • Connecting the same client again revokes its previous key. Each account keeps one Claude connection and one ChatGPT connection, so connecting a second Claude account disconnects the first.
To keep several connections at once, give each extra one an API key of its own. In Claude, a custom connector can also send an API key: choose No sign in under Authentication and add the Authorization header under Request headers. On Team and Enterprise plans, everyone who uses that connector shares the key’s access. API keys you create don’t expire. Whatever the way in, all MCP connections of an account share the same limits.

​
Disconnect

Revoke the key in your account security settings: the Claude or ChatGPT key for an OAuth connection, or the key you created. Access ends at the client’s next request. Removing the connector or server in the client stops it from calling, but only revoking the key on Square Cloud invalidates it.