OAuth Custom Connector

Overview

The OAuth custom connector lets an end user sign in to Kloudfuse with their normal SSO identity (Okta, Azure AD, Google, SAML) and use the MCP server from their desktop AI client — no long-lived service account token pasted into every client. Each user gets a short-lived access token bound to their session.

This is the recommended setup for interactive clients like Claude Desktop, Claude Code, Codex, and the Gemini CLI. For headless or programmatic use, continue to use the service-account-token flow in Install MCP Server in Kloudfuse.

A cluster operator enables the connector once; end users then follow the page for whichever AI tool they use.