---
title: "MCP Server"
description: "Expose ARX capabilities as MCP tools, issue credentials to agent clients, and scope what each one may access"
canonical_url: "https://docs.ardge.com/en/guide/advanced/mcp-server"
---
# MCP Server

> Expose ARX capabilities as MCP tools, issue credentials to agent clients, and scope what each one may access

<note>

**Advanced / AI agent integration.** If you don't need an external agent to operate ARX, skip this page.

</note>

## Overview

MCP Server lets an external AI agent use part of ARX's capabilities, once you've authorised it.

Claude Desktop, Cursor or any other AI tool that speaks MCP can connect to ARX this way. You issue each tool its own credential and limit what it may view or operate.

**AI agent → credential → scoped permissions → ARX tools**

The service is off by default.

![MCP Server in Control Panel](https://docs.ardge.com/screenshots/guide/en/mcp-server.webp)

## Step 1: Turn on MCP Server

Once it's on, MCP-capable clients can reach ARX.

Turning the service off drops every connection but keeps the credentials, so switching it back on restores access.

## Step 2: Create a credential for each client

**Credentials** holds one named credential per client. Creating one issues a PAT token for that client to connect with.

<tip>

Give each AI client or use case its own credential rather than sharing one between people.

</tip>

![Creating a credential](https://docs.ardge.com/screenshots/guide/en/mcp-02.webp)

## Step 3: Set the permissions

Set per credential: **None**, **Read** or **R/W** on Control Panel, AI Model Center, App Market and Log Center.

Permission changes take effect immediately, with no reconnection needed.

![The permission scope of a credential](https://docs.ardge.com/screenshots/guide/en/mcp-03.webp)

## Step 4: Add the connection to your AI client

Copy the generated config snippet into your agent client.

![MCP client configuration](https://docs.ardge.com/screenshots/guide/en/mcp-04.webp)

## Security advice

- One credential per client
- Grant only the minimum permission the task needs
- Delete a credential you no longer use — deleting one cuts off its client immediately
- If you suspect a token has leaked, revoke it and issue a new one


## Sitemap

See the full [sitemap](https://docs.ardge.com/sitemap.md) for all pages.