MCP connector

Public tunnel + Cloudflare Access state for the Claude.ai connector (ADR-0017).

Connector status

Tunnel + JWT enforced

Cloudflare Access is verifying every request.

Public hostnamecos-mcp-cloudflarebegin.johnsonspecialtybrain.com
MCP server version0.2.0-phase1-real
Cloudflare team domainwjbig.cloudflareaccess.com
Cloudflare Access AUD8bcdefcf1b895415066537452790fc1245f291addc90edae3b32ecfd4e9d5c78
JWT enforcementOn

Tool catalog

The Phase 1 catalog Claude.ai sees once the connector is registered. Adding tools requires a code change plus an MCP server version bump.

  • search_brain
  • get_arx_state
  • save_conversation
  • get_person_profile

Configure

Hostname and Cloudflare Access values are read from environment variables. Update them by editing .env.local and restarting both the dashboard and the cloudflared service. Editable UI controls (so the hostname can be swapped to a custom domain without leaving Settings) are tracked as a follow-up for the next iteration of ADR-0017.

# .env.local
MCP_PUBLIC_HOSTNAME=cos-mcp-xyz.cfargotunnel.com
CF_ACCESS_TEAM_DOMAIN=berylline.cloudflareaccess.com
CF_ACCESS_AUD=<application-audience-tag>

Step-by-step setup (cloudflared install + GitHub IdP + Claude.ai connector registration) lives at OUTPUTS/builds/cos-dashboard/MCP-TUNNEL-RUNBOOK.md.