Set it up
1
Open the MCP page
Console → MCP. It is a premium feature, so the entry may not be there.
2
Copy the snippet for your client
Cursor, Claude, VS Code and others each want it in a slightly different place. The page shows
the right shape for each.
3
Authorise
The client opens a browser for OAuth 2.1 with PKCE when it connects. There is no token to
paste.
4
Pick which tools are on
Read tools are on by default. Write tools are off until you turn them on.
What the assistant can read
list_methods is the one worth knowing about: with a method name it returns the full
hyperparameter declaration including types and ranges, so an assistant proposing a change can
check it is legal before suggesting it.
What it can write, once you allow it
create_submit_plan is the safer shape for the same intent: the assistant proposes, a person
approves.
Check it worked
Ask your client to list its tools. You should see the read tools above and nothing else, unless you enabled a write tool. Then ask for something concrete:get_metrics_summary on a finished run returns each metric’s
latest value with its min and max and the step each happened at. If the client reports “not
authenticated: complete the Connect / login authorization in your MCP client”, the OAuth round
trip did not finish.
Endpoint and protocol
- Transport is Streamable HTTP MCP, protocol revision
2026-07-28. - The same endpoint serves modern clients, which discover with
server/discoverand no handshake, and older clients that sendinitializeon2025-11-25and earlier. - Authorisation is OAuth 2.1 with PKCE. Client ID Metadata Documents are preferred, and Dynamic
Client Registration stays as a fallback. Authorisation-code redirects carry RFC 9207
iss, which is skipped only in localTUNEPLANE_NO_AUTH=1debugging.