> For the complete documentation index, see [llms.txt](https://docs.slatecx.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.slatecx.com/concepts/mcp.md).

# MCP

SlateCX runs two Model Context Protocol servers with different audiences, different authorization, and different tools.

|                 | Tenant MCP                           | Slate MCP                                   |
| --------------- | ------------------------------------ | ------------------------------------------- |
| Endpoint        | `/mcp/tenant`                        | `/mcp/slate`                                |
| Audience        | A tenant user                        | A prospect                                  |
| Consent surface | Admin, `/mcp/authorize`              | Wallet, `/oauth/authorize`                  |
| Purpose         | Read and author tenant configuration | Continue a saved Slate in ChatGPT or Claude |

Both are stateless Streamable HTTP MCP resources.

## Tenant MCP

### Grant model

One grant binds one connection to one explicit active tenant membership and a human-approved subset of scopes.

| Scope                        | Requires                                       |
| ---------------------------- | ---------------------------------------------- |
| `tenant:configuration:read`  | Active membership                              |
| `tenant:slates:read`         | Active membership                              |
| `tenant:configuration:write` | Configuration read, and tenant admin           |
| `tenant:destructive:write`   | Configuration read and write, and tenant admin |

Destructive access is never preselected. Superuser status never grants implicit tenant access.

### Tools

22 read-only tools cover tenant context, campaigns, sources, cards, branding, entry-point presentation, jobs, source knowledge retrieval, and Slate evidence and reporting.

24 authoring tools cover campaigns and agent configuration, sources and cards, tenant experience, and prompt pills.

### Reporting boundaries

Slate-backed reporting excludes preview-created Slates while retaining real archived history. Card Performance aggregates are unlabeled, and Wave reporting is not Slate-owned.

## Slate MCP

Slate MCP is standards-first: one MCP server, one set of app tool and resource registrations, and one widget bundle using the standard MCP Apps bridge. ChatGPT and Claude are certified peers around that same portable core.

### Authorization

Public-client authorization code with S256 PKCE, refresh rotation, and revocation. The prospect sees the requesting client host before any input.

### Discovery

```
GET /.well-known/oauth-protected-resource
GET /.well-known/oauth-protected-resource/mcp/slate
GET /.well-known/oauth-authorization-server
GET /.well-known/openai-apps-challenge
```

The OpenAI challenge route returns `404` when no verification token is configured.

### Returning to Wallet

A return token is redeemed into a normal Wallet participant session through `POST /slates/:slateId/session/slatecx-token-transfer`. The prospect ends up in the same Slate they left.

## See also

* [Connect MCP clients](/guides/connect-mcp-clients.md)