Skip to main content

MCP Server

Connect Claude or Cursor to Bryn and ask questions in plain language: "which accounts hit pricing this week?", "what did Bryn run yesterday?", with no API code required. Whatever the Control Plane API exposes, an MCP client can use as tools.

Bryn exposes a Model Context Protocol server for this. It speaks streamable HTTP and is secured with Civic Auth over OAuth.

Endpoint

The MCP URL is tenant-specific: it names the Bryn workspace the connection operates on via the tenant query parameter.

https://bryn.civic.com/mcp?tenant=<tenantId>

Copy your ready-made URL — with your tenant ID filled in — from the Bryn dashboard under Integrations → MCP.

note

Clients that can send custom headers may pass X-Bryn-Tenant: <tenantId> instead of the query parameter. Most MCP clients can't set headers, so the query parameter is the primary form.

Authentication

The server is secured with Civic Auth over OAuth. Clients that support OAuth will open the Bryn login page in your browser the first time you connect: sign in there, and the client is authorized automatically. There's no token or API key to copy.

Access is governed by your Civic Auth membership, the same way the REST API resolves it: the tenant parameter is a selector validated against your memberships, and the tenant bound at the data layer is always taken from the matched membership. Naming a tenant you don't belong to is rejected with 403 tenant_forbidden.

Connecting

Clients that don't yet support remote MCP servers with OAuth can bridge through mcp-remote, which handles the OAuth flow locally.

In the snippets below, replace the URL with the one you copied from Integrations → MCP (or swap in your tenant ID for <tenantId>).

Add to your claude_desktop_config.json:

{
"mcpServers": {
"bryn": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://bryn.civic.com/mcp?tenant=<tenantId>"]
}
}
}

Restart Claude Desktop, then complete the Civic Auth sign-in when prompted.

note

Once connected, your client lists the tools Bryn provides; this page intentionally doesn't catalogue them. Discover the current set directly in your MCP client.