ai - mcp server - configuration

  • Updated

Overview

The Neostella MCP Server allows external AI tools, such as Claude and ChatGPT, to securely authenticate and access platform data. 

Configure the MCP Server to extend Neostella data to external environments while maintaining the existing granular security model. This ensures data is accessed securely without manual exports, reducing administrative overhead. 

 

Technical Considerations

Dependencies

The MCP functionality is controlled via a Feature Flag.  While the configuration steps can be completed, the MCP Server cannot be accessed until the feature is enabled for you by the Neostella Admin.

 

Required Permissions

  • Users must be assigned to the Workspace - AI MCP permission set.
  • Access to the MCP Server is blocked by default.

 

Limitations

  • The MCP Server respects user-granted permissions.
  • The available tools are limited by the user permissions set for accessing objects in the platform.
  • Users cannot read records via the MCP Server if they do not have access to them in the platform.

 

Configuration Steps

Configure User Permissions

For assigning users to the appropriate permission set to grant access to the MCP Server, follow the steps below.

  1. Open Control Center.
  2. Open Access, and select Permissions.
  3. Use Filter option and select columns by Type, choose the contains operator, and enter mcp in the filter value.

  1. Select the Workspace - AI MCP permission set. 

    If the permission set does not exist, create a new permission set of the type Workspace - AI MCP.

  1. Add the users that require access to the MCP Server.
  2. Click Save.

 

Connect to Claude Desktop or Web

Configure the custom connector to authenticate Claude with Neostella.

  1. Open Claude.
  2. Select Customize in the left navigation drawer.

  1. Select Connectors.
  2. Click Add, and select Add custom connector.

  1. Type Neostella in the Name field.
  2. Copy this link https://api.neostella.app/v1/mcp/server and paste it in the Remote MCP server URL field.
  3. Copy this client ID 6echh79f8kkgett0jmh5225vbo and paste it in the OAuth Client ID field.
  4. Click Add.

  1. Click Connect to start the authentication process.

  1. Type the user credentials in the Neostella login page.

 

Connect to ChatGPT

Configure the plugin to authenticate ChatGPT with Neostella.

  1. Open ChatGPT.
  2. Select the user profile, then click Settings.

  1. Select Security and Login.
  2. Toggle the Developer mode to enable developer access.

  1. Select Plugins, then click Browse plugins.

  1. Click the + button next to the search box.

  1. Enter Neostella in the Name field.
  2. Paste this link https://api.neostella.app/v1/mcp/server in the Server URL field.
  3. Select OAuth in the Authentication field.
  4. Click Advanced OAuth Settings.

  1. Select User-Defined OAuth Client under the Client registration section.
  2. Paste this client ID 6echh79f8kkgett0jmh5225vbo in the OAuth Client ID field.
  3. Select client_secret_post in the Token endpoint auth method drop-down list.
  4. Tick “I understand and want to continue” warning, then click Create.

  1. Click Sign in with Neostella DEV when prompted.

  1. Enter the user credentials in the Neostella login page.

 

Validation

Follow these steps to validate whether the configuration is successful:

  1. Open a new chat in the external AI tool.
  2. Request the AI tool to search for a specific project that the user has access to.
  3. Verify that the AI tool successfully returns the matching project details.

 

Troubleshooting

Problem DescriptionPossible CauseResolution Steps
The server rejects the request after successful authentication.The MCP Feature Flag is not enabled for the Admin.Contact the Product team to verify the Feature Flag status and enable it for the Admin.
The AI tool indicates no records are found, but records exist in the platform.The authenticated user does not have permission to view the records.Review the permissions assigned to the user in Control Center to ensure they have object-level access to the data.
The user cannot authenticate to the MCP Server.The user is not added to the allow list.Ensure the user is assigned to the Workspace - AI MCP permission set.