Documentation
MCP

Connect any MCP client

SageOx speaks the standard MCP protocol with OAuth 2.1 + Dynamic Client Registration (RFC 7591). If your tool supports MCP, this is everything it needs.

Server URL

https://sageox.ai/mcp

mcpServers config

For tools that use a JSON config file:

{
  "mcpServers": {
    "sageox": {
      "url": "https://sageox.ai/mcp"
    }
  }
}

How auth works

On the first call to the SageOx MCP server, your tool will:

  1. Get a 401 whose WWW-Authenticate header points to the resource metadata at /.well-known/oauth-protected-resource/mcp
  2. Read the authorization server metadata at /.well-known/oauth-authorization-server
  3. Register itself via DCR at /api/auth/oauth2/register (PKCE S256 required)
  4. Open a browser tab to the OAuth consent screen at /api/auth/oauth2/authorize
  5. Exchange the auth code for an access token at /api/auth/oauth2/token
  6. Use the bearer token for all subsequent MCP calls

This is the standard MCP authorization flow, so any MCP-compliant client can connect without SageOx-specific setup.

Tools available

These are the tools most conversations start with:

ToolWhat it does
GetStartedExplains SageOx and walks a new user through setup
PrimePrimes your AI coworker with your team's conventions, recent decisions, who's on the team, and current focus
SearchSearches your team's Discussions, docs, Sessions, and Murmurs (ChatGPT uses lowercase search and fetch instead)
ListTeamsLists the teams you belong to
ListBubbles / ReadBubbleFileLists the Knowledge Bubbles you can see, and reads their curated files
ListRecordings / ConversationTranscriptLists a team's recent Discussions, and returns one Discussion's full transcript
SaveSessionSummarySaves a distillation of the conversation, once you've confirmed it, as a Session in Team Context
PublishMurmur / ListMurmursPosts and reads short work-in-progress notes your teammates see
HelpAnswers how-do-I questions and explains how to recover from a tool error

Your client's tools/list is the source of truth: it carries the full set, with each tool's schema and description, and the set can differ by client. Scopes are surfaced on the OAuth consent screen.

Managing connections

/settings/security lists all active grants. Revoke per-client or all at once, revocation invalidates the access token, so the next MCP call returns 401 and the client cleans up its local state.

What's next