Skip to content

Installation

The Toado MCP server is hosted at:

https://mcp.toado.dev/mcp

Almost every modern client supports OAuth, which means no token to copy or paste. Below are the per-client instructions; if your client is not listed, see Other clients at the bottom.

Pick your client

Two steps: register the server with the CLI, then authenticate from inside a Claude Code session. The consent screen with the three access levels appears at step 2.

1. Register the server. In your terminal — bash, zsh, PowerShell, or cmd all work. The --scope user flag makes Toado available across all your projects, not just the one you’re in.

Terminal window
claude mcp add toado --transport http https://mcp.toado.dev/mcp --scope user

2. Authenticate. Open a Claude Code session and run /mcp. A browser tab opens for OAuth approval; pick your access level and approve. The token is stored automatically.

  • VS Code or Cursor: open the Claude Code chat panel and type /mcp.
  • Terminal: run claude in any directory, then type /mcp at the prompt.

Verify with:

Terminal window
claude mcp list

You should see toado in the output.

Prefer a token? Generate one in the token section below and run this instead — it skips the /mcp auth step:

Terminal window
claude mcp add toado --transport http https://mcp.toado.dev/mcp --header "Authorization: Bearer <your-token>" --scope user

Verify the connection

In your client, ask:

List my Toado companies.

The client should call list_companies and return your company list. If it does not, see Troubleshooting.

Manual token (alternative)

OAuth covers almost every case. Reach for a manually-issued token only if one of these applies:

  • Your client does not support OAuth (Cline, Continue, Goose, Zed, custom SDK builds).
  • You are wiring Toado into CI or another non-interactive context where a browser-based OAuth flow does not fit.
  • You need a token scoped down to specific companies or projects, or restricted to read-only.
  • You are running a self-hosted Toado backend.

Create a token

In the Toado web app, Settings › API tokens:

Tokens are created in the web app under Settings › API tokens. Pick a label, choose scopes, and optionally restrict to specific companies or projects. The token string is shown once at creation time and cannot be retrieved later, so save it immediately.

Label claude-code on my-laptop Human-readable name. Shows up on every comment and edit the token makes.
Scopes read comments tickets:write tickets:assign Granular. Read-only audit tokens want just read. Full-power agents want all four.
Company filter All companies (no filter) Restrict to one company id to scope down a token.
Project filter All projects in those companies Restrict further to specific projects.

Output looks like tok_01HXYZ123ABCD.... Treat it like a password. Revoke at any time from the same settings page; revocation is effective immediately.

  1. Click New token.
  2. Label it specifically, e.g. cline on macbook or ci-pipeline. The label shows up on every comment and edit the token makes, so make it scannable.
  3. Choose scopes. For a full-power agent, pick all four: read, comments, tickets:write, tickets:assign. For read-only audits, just read.
  4. Optionally restrict to one company or project.
  5. Click Create. The token appears once. Copy it now: tok_01HXYZ.... You cannot retrieve it again.

See Tokens & scopes for the full scope matrix.

Use the token

In any of the per-client instructions above, replace the OAuth path with the bearer-header path. The URL stays the same: https://mcp.toado.dev/mcp. The header is always:

Authorization: Bearer <your-token>

Self-hosted Toado backend

If you are pointing at a self-hosted or staging deployment, swap the host in the URL. Example: https://toado.staging.example.com/mcp. The path (/mcp) and the auth model are identical.

Updating

Hosted Toado MCP is rolled forward server-side; clients reconnect automatically. There is nothing to update on your end.

Where to next