Connect a client
This page walks through installing the K-AI MCP servers (Retrieval and Audit) into the major MCP-compatible clients. Both servers use Streamable HTTP transport and the same OAuth 2.1 Authorization Server (auth-api.kai-studio.ai) — a token obtained from one is accepted on the other.
Cursor
One-click deep-link (plus manual fallback)
Per-server deep-link.
Claude Desktop
UI only (Custom Connectors)
Pro / Max / Team / Enterprise plan required.
Mistral Le Chat
UI only (Custom MCP Connector)
May require Admin privileges.
Cursor
Cursor supports one-click installation via deep-links. Click each button to install (each opens Cursor and pre-fills the MCP config):
Install K-AI Retrieval (stable)
Manual fallback — add to your Cursor MCP config at ~/.cursor/mcp.json (global) or .cursor/mcp.json (per-project):
{
"mcpServers": {
"kai-retrieval": {
"url": "https://api-retrieval.kai-studio.ai/mcp"
},
"kai-audit": {
"url": "https://api-audit.kai-studio.ai/mcp"
}
}
}On some Linux distributions (notably Debian), cursor:// deep-links may fail to open the app. Use the manual config above if the buttons don't work.
On first use Cursor will open a browser tab for OAuth authentication. Sign in (local credentials or Microsoft SSO) and grant access; tokens are stored and refreshed automatically.
Claude Desktop
Claude Desktop does not expose a public deep-link scheme for MCP installation. Remote MCP servers must be added through the web Custom Connectors panel, not via claude_desktop_config.json (which is reserved for local stdio servers).
Open claude.ai and sign in (requires Pro, Max, Team, or Enterprise plan).
Click your profile icon, then Settings → Connectors.
Click + then Add custom connector.
Enter the URL:
https://api-retrieval.kai-studio.ai/mcp.Complete the OAuth flow in the browser popup.
Open claude.ai and sign in (requires Pro, Max, Team, or Enterprise plan).
Click your profile icon, then Settings → Connectors.
Click + then Add custom connector.
Enter the URL:
https://api-audit.kai-studio.ai/mcp.Complete the OAuth flow in the browser popup.
Mistral Le Chat
Le Chat does not expose a public deep-link scheme. Add each connector through the web UI.
Open chat.mistral.ai and sign in.
Click the toggle panel button (sidebar).
Expand Intelligence → click Connectors.
Click + Add Connector → select the Custom MCP Connector tab.
Fill in the form:
Connector name:
kai-retrievalConnection server:
https://api-retrieval.kai-studio.ai/mcpDescription: K-AI document retrieval
Authentication: OAuth 2.1 (auto-detected)
Click Connect and complete the OAuth flow.
In any chat, click the Tools button (four-squares icon) and enable the
kai-retrievalconnector.
Open chat.mistral.ai and sign in.
Click the toggle panel button (sidebar).
Expand Intelligence → click Connectors.
Click + Add Connector → select the Custom MCP Connector tab.
Fill in the form:
Connector name:
kai-auditConnection server:
https://api-audit.kai-studio.ai/mcpDescription: K-AI document audit
Authentication: OAuth 2.1 (auto-detected)
Click Connect and complete the OAuth flow.
In any chat, click the Tools button (four-squares icon) and enable the
kai-auditconnector.
Adding Custom Connectors may require Admin privileges on the Le Chat workspace.
Custom MCP client
For clients without UI integration, configure manually:
K-AI MCP server URLs:
Retrieval:
https://api-retrieval.kai-studio.ai/mcpAudit:
https://api-audit.kai-studio.ai/mcp
Transport: Streamable HTTP, stateless.
OAuth discovery: GET
https://api-retrieval.kai-studio.ai/.well-known/oauth-authorization-serverorhttps://api-audit.kai-studio.ai/.well-known/oauth-authorization-server. Both return identical metadata pointing toauth-api.kai-studio.ai.Required flow: Dynamic Client Registration (RFC 7591) + Authorization Code with PKCE (S256). Refresh tokens are rotated on every use.
See OAuth flow (detailed) for the full sequence, endpoint reference, and troubleshooting. The full OAuth 2.1 narrative is in Authentication → OAuth 2.1.
First-connection flow (all clients)
The MCP client fetches the discovery document at
/.well-known/oauth-authorization-server.It registers itself dynamically (DCR — RFC 7591).
A browser window opens for user authentication (Microsoft SSO or local login).
Tokens are exchanged and stored by the client.
Subsequent tool calls are authenticated transparently; refresh tokens are rotated automatically every ~15 minutes.
Last updated