Square Cloud MCP server

The Square Cloud MCP server lets an AI client work on your account through the Model Context Protocol. Ask in plain words and the client calls the tools for you: check status, logs, metrics and edge traffic, read and edit files, manage environment variables, start and restart applications, create applications, databases and snapshots, and more.

Remote, nothing to install: one HTTPS address for every client.
Two ways to connect: Claude and ChatGPT sign in with OAuth on a Square Cloud consent page. Claude Code, VS Code, Cursor and other clients send an API key.
Your permissions decide: a connection only sees the tools its scopes cover, and a key limited to some applications and databases only reaches those.
Your client asks, your data stays safe: your client’s permission prompt decides which changes run, and deleting an application or a database or restoring a snapshot takes a safety snapshot first.

Endpoint

https://mcp.squarecloud.app/mcp

This is the only address of the MCP server. On api.squarecloud.app or any other Square Cloud address, MCP requests answer 421 WRONG_HOST with the right address. The other way around, mcp.squarecloud.app serves only the MCP server, never the REST API.

Requirements

An active plan. The MCP server is part of every Square Cloud plan, from Hobby up. Without an active plan, every request answers 403 UPGRADE_REQUIRED. If your plan expires, your connections are kept and work again as soon as the plan is renewed.
An MCP client that supports remote servers over Streamable HTTP, such as Claude, ChatGPT, Claude Code, VS Code or Cursor. See Connect a client.

Protocol

Topic	Details
Transport	Streamable HTTP, `POST` only. The server keeps no session, and `GET` answers `405`.
Protocol versions	`2026-07-28`, `2025-11-25`, `2025-06-18` and `2025-03-26`. Clients of the `2026-07-28` revision call without a handshake; older clients start with `initialize`. A request without `MCP-Protocol-Version` is read as `2025-03-26`, and an unsupported version answers `400` with the supported list.
Capabilities	Tools only, no resources or prompts.
Results	Each tool answers one JSON object as a text block, with `ok`, a `summary` and, when something failed or needs you, a `code`.
Long calls	A call that takes more than a few seconds is answered as a stream (SSE) with keepalives. Closing the connection cancels the call, and no call runs longer than 3 minutes.

What stays outside the MCP

Deploying a folder from your computer. The MCP works on what is already on Square Cloud. Upload a project with the CLI, the VS Code extension or GitHub deploys.
Downloads of snapshots and database certificates. The signed download link would land in the conversation and with the AI model’s provider. Download them from the dashboard.
Account activity. It shows the IP addresses and devices of your account, so it stays in the dashboard.
Secret values. Environment variable values, .env files and private keys never reach the AI client. See Secrets.
Account settings, billing, API keys and workspace members. They are managed in the dashboard.

Next steps

Connect a client

Set up Claude, ChatGPT, Claude Code, VS Code or Cursor.

Permissions and safety

Scopes, restricted keys and safety snapshots.

Tools

Every tool and the scope it needs.

Limits and errors

The request and tool limits, and what each error means.

​Endpoint

​Requirements

​Protocol

​What stays outside the MCP

​Next steps