thinkwise-install-mcp

Registers and authenticates an OAuth-protected HTTP MCP connector in Claude Code.

5|Updated Aug 25, 2026
One-click install
npx skills add https://github.com/rkortThinkwise/sf-mcp-skills-temp --skill thinkwise-install-mcp-rkortthinkwise
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: thinkwise-install-mcp
Source: https://github.com/rkortThinkwise/sf-mcp-skills-temp/tree/main/thinkwise-install-mcp
Command: npx skills add https://github.com/rkortThinkwise/sf-mcp-skills-temp --skill thinkwise-install-mcp-rkortthinkwise

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Setting up an OAuth-protected HTTP MCP connector in Claude Code involves many error-prone details: choosing the right config scope, exporting the client secret correctly, pinning the callback port, discovering scopes dynamically, and editing ~/.claude.json without corrupting it. This Skill walks through the entire registration and authentication flow step by step, asking the user for each value instead of assuming defaults. ## Core Features & Use Cases - Guided configuration gathering: Prompts for server name, MCP endpoint URL, OAuth client ID/secret, callback port, discovery URL, and config scope one at a time. - Correct connector registration: Runs claude mcp add with the right transport, scope, client credentials, and callback port, and adds the authServerMetadataUrl to ~/.claude.json. - Dynamic scope discovery: Queries the server's RFC 9728 protected-resource metadata for scopes_supported, diffs against existing config, confirms with the user, and writes scopes with targeted edits. - Verification and troubleshooting: Validates JSON config, checks registration with claude mcp get, and covers common failures like client secret validation errors, 404 URLs, and scope changes. - Use Case: You need to connect Claude Code to an Indicium/sf_mcp-style OAuth-protected MCP endpoint for the Thinkwise Software Factory. The Skill collects your credentials, registers the connector at user scope, pins the advertised scopes, and guides you through the browser OAuth login. ## Quick Start Ask Claude to install and authenticate a new OAuth-protected HTTP MCP connector in Claude Code, providing the server name, endpoint URL, and OAuth client credentials when prompted.

Frequently Asked Questions about thinkwise-install-mcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add an MCP connector in Claude Code?

Use claude mcp add with the transport type, server name, and URL, plus --client-id, --client-secret, and --callback-port for OAuth-protected HTTP endpoints. Export the client secret as the MCP_CLIENT_SECRET environment variable in the same shell invocation as the add command.

How do I configure OAuth scopes for an MCP server in Claude Code?

Query the server's .well-known/oauth-protected-resource metadata endpoint to get its scopes_supported array, then write those scopes into the oauth.scopes field of the server entry in ~/.claude.json. Confirm the scope list with the user before granting, and validate the JSON afterward.

What is the difference between user and local scope for MCP servers?

User scope (-s user) registers the connector once for every project on the machine, while local scope restricts it to the current project only. Without an explicit -s flag, claude mcp add defaults to local, which is a common source of missing servers in other projects.

Why does MCP authentication fail with client secret validation failed?

This error occurs because Claude Code links the stored client secret to a hash of the server config, and editing the URL or secret directly in ~/.claude.json orphans that link. Fix it by removing the server with claude mcp remove and re-adding it through claude mcp add.

Why does my MCP server not appear after adding it?

Claude Code enumerates MCP servers only at session start, so a server added mid-session will not appear until you restart or reload the session. After restarting, run /mcp, select the server, and complete the OAuth login in the browser.