Authentication
OAuth (interactive clients) — MCP clients supporting RFC 9728 discover endpoints automatically. Claude Desktop, claude.ai custom connectors, and Claude Code handle this out of the box. API key (programmatic) — pass in thex-api-key header. Generate keys from your account settings.
Setup
Claude Desktop
Add to~/Library/Application Support/Claude/claude_desktop_config.json:
Claude Code
Other clients
Any MCP client with Streamable HTTP transport support. Point athttps://app.machine0.io/mcp with OAuth or an API key header. Browser-based clients work too via OAuth — the OAuth and MCP endpoints are CORS-enabled, so tools like the MCP Inspector can connect and complete the OAuth flow directly from the browser. (The x-api-key header is for non-browser clients; browsers authenticate with OAuth.)
Tools
Managed keys
To usessh_exec, VMs must be created with a managed key (server-side keypair). Create one with ssh_key_create_managed, then pass its ID when creating VMs. VMs with public keys cannot use ssh_exec.