01 Connect

The host finds the gate. You approve the client.

https://mcp.agentik-os.com/api/mcp

01
Add Agentik-OS as an OAuth MCP connector at the public MCP URL.
02
The host POSTs without a token, reads WWW-Authenticate, then fetches metadata.
03
The host identifies itself and runs OAuth 2.1 authorization-code plus PKCE.
04
You allow the host. Later POSTs send Authorization: Bearer.
05
can() still decides each OS. Unpaid accounts get no tools.

HTTP add

claude mcp add --transport http --scope user Agentik-OS https://mcp.agentik-os.com/api/mcp

Claude Code

claude mcp add --transport http --scope user Agentik-OS https://mcp.agentik-os.com/api/mcp

mcp.json

{
  "mcpServers": {
    "Agentik-OS": {
      "url": "https://mcp.agentik-os.com/api/mcp"
    }
  }
}

02 Endpoints

Health is public. Tools need a paid session or key.

GET /api/mcp: Public health ping
POST /api/mcp: JSON-RPC. Bearer, paid key, or session
GET /mcp: Same health ping
POST /mcp: Same JSON-RPC handler
GET /api/cli: CLI discovery
POST /api/cli: HTTPS JSON. Same tools
GET /.well-known/oauth-protected-resource: RFC 9728
GET /.well-known/oauth-authorization-server: RFC 8414
POST /oauth/register: Dynamic client registration
GET /oauth/authorize: Consent
POST /oauth/token: Access token

Health

curl -s https://mcp.agentik-os.com/api/mcp

Protected resource

curl -s https://mcp.agentik-os.com/.well-known/oauth-protected-resource

Authorization server

curl -s https://mcp.agentik-os.com/.well-known/oauth-authorization-server

tools/call

curl -s -X POST https://mcp.agentik-os.com/api/mcp -H "Authorization: Bearer $AGENTIK_API_KEY" -H "Content-Type: application/json" -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_os","arguments":{}}}'

03 Tools

The same twenty tools as POST /api/cli.

If the host cannot run a job, Agentik returns a blocked receipt. It does not silently call a cloud model. Composio session.mcp.url is not a second MCP.

talk: Conversation pack. One call. No store tour
list_projects: Named projects for one OS. Isolated stores
create_project: Open a new client or mission on that OS
use_project: Switch the active project
list_os: Official OS this workspace may see
list_agents: Compiled roster. Only when you need a teamId
run_os: Formal host job envelope. Optional instanceId
ask_director: Formal Director job. Blocked until approve
ask_team: Formal specialist job. teamId from list_agents
approve: Human-gate receipt. Reset and wake wait here
list_instances: Cloud OS instances. Each row is a project
open_instance: Open one instance by id
list_objects: Page instance objects. Never the whole store
get_object: Read one object payload
put_object: Write one object. Kind from instanceContract
remember: Store a memory fragment on the project
recall: Page memory. talk already recalls what matters
forget: Delete one fragment. No ghost copy
list_connections: App connections. Toolkit plus ca_ id only
connect_app: Start an app connection. Returns an OAuth URL
overlay_patch: Private overlay. cannotOverride stays in force
reset_os: Blocked reset. memory, structure, or full
export_instance: Export, then optional real wipe
wake_os: $199 hosted Hermes request. approve required

Install API How to talk

Previous URL /docs/mcp-host-mode redirects here. Call shapes live in API.

04 Sources

Check it somewhere other than here.

Model Context Protocol specification: The open protocol Agentik speaks. Tools, resources, and the client to server contract.
Anthropic: MCP in Claude and Claude Code: How a Claude host adds a remote MCP server and authorizes it.
OpenAI: MCP connectors: The same protocol from the ChatGPT and Codex side.
Cursor: Model Context Protocol: Cursor's own MCP configuration reference.