Skip to main content

MCP authentication

Hosted MCP (Claude.ai, ChatGPT)​

  1. Add https://api.catazenta.com/mcp as the connector URL.
  2. The AI app discovers OAuth settings from the MCP endpoint.
  3. Sign in with your CataZenta account.
  4. The app sends a Bearer token on each request.
  5. Actions run as you — same tenant and permissions as the PIM.

If connection fails, confirm your tenant has MCP enabled and your account is active.

Local MCP connector​

The connector authenticates to https://api.catazenta.com using credentials from onboarding:

  • Username + password — connector obtains a JWT at startup, or
  • Bearer token — for automation (rotate per your security policy)
tip

Prefer a dedicated integration user with least-privilege roles.

Tenant scope​

Tokens are scoped to your organization/tenant. The assistant only sees data your roles allow — same as the REST API.

Security practices​

  • Use HTTPS only (https://api.catazenta.com).
  • Rotate passwords and tokens on the same schedule as other API integrations.
  • Use a non-production tenant for connector testing when available.
  • Control which AI apps may use write-capable tools in your organization.