MCP Setup
Watch the setup walkthrough first if you have not set up an MCP before:
If the video does not load, open it directly:
Social Glass MCP setup walkthrough
If you just want the easiest setup:
- Add this URL to your MCP client:
- Sign in with your Social Glass account when prompted.
- Test with
get_viewer_context.
Which URL should I use?
Most people should use:Before you start
Make sure:- you have a Social Glass account
- your account is assigned to the right organization
- you are a Social Glass admin if you are trying to use write tools
Fast setup
In most MCP clients, the flow is:- Add a new remote MCP server.
- Paste the Social Glass MCP URL.
- Start the login flow.
- Sign in through Clerk.
- Return to the client and finish connecting.
Codex OAuth setup
For OAuth in Codex, add the remote server without a bearer-token env var, then start the MCP login flow:codex mcp get social-glass shows bearer_token_env_var, that server is configured for bearer-token auth. Remove and re-add it without --bearer-token-env-var if you want OAuth.
Use Codex’s secure OAuth credential storage when possible:
codex mcp logout social-glass and then run the login command again. You should not need to sign out of the Social Glass web app.
Claude Code OAuth setup
For Claude Code, add the same hosted MCP URL as a remote HTTP server:/mcp to complete OAuth if the server asks you to authenticate. Project-scoped .mcp.json servers may also need approval in Claude Code before they connect.
Durable API key setup
OAuth is the preferred setup when your MCP client handles refresh and reauth well. If your MCP client repeatedly loses OAuth state, Social Glass MCP also supports Clerk user API keys. API keys are long-lived bearer tokens tied to your Social Glass account and can be revoked from your account settings. Use this path only after Social Glass has enabled Clerk User API keys for your workspace:- Open your Social Glass account profile from the avatar menu.
- Create a user API key for MCP access with the
social-glass:mcpscope. - Store the key in your MCP client as the bearer token for:
social-glass:mcp scope are not supported for MCP access.
For Codex, the bearer-token setup is:
SOCIAL_GLASS_MCP_BEARER_TOKEN in your local secret manager or shell environment before starting Codex.
For Claude Code, prefer OAuth. If you must use a bearer token, pass it as an HTTP authorization header when adding the server:
Install as a Codex plugin
If your team uses Codex, you can install Social Glass as a plugin instead of adding the MCP URL by hand. Add the Social Glass marketplace source:- Restart Codex if needed.
- Open the
social-glassmarketplace. - Install
Social Glass. - Complete the OAuth flow when prompted.
get_instructions.
Install as a Claude Code plugin
If your team uses Claude Code, install the same Social Glass plugin source:/mcp to authenticate if prompted.
Add as a Claude connector
For Claude chat or Claude Desktop, add the hosted MCP URL as a custom connector:OAuth scopes
Social Glass MCP asks clients for the minimum Clerk scopes it needs:profileemail
openid, refresh the MCP login or verify that it is reading the current metadata.
Copy-paste prompt for Codex or Claude Code
If you want your coding agent to do the setup for you, give it this:Write access
Write access uses the same MCP endpoint:Common errors
Dynamic client registration not supported
Your MCP client is trying to register itself automatically, but it is talking to stale metadata or the wrong auth server.
Social Glass supports dynamic client registration.
What to do:
- retry the login flow
- make sure you are using the live Social Glass MCP URL
- make sure your MCP client is not caching an older OAuth metadata response
No authorization support detected
Usually this means your MCP client is not talking to the live Social Glass OAuth MCP endpoint.
Common causes:
- you pointed the client at a local proxy instead of
https://mcp.socialglass.ai/mcp - your repo-local MCP config still uses an older non-OAuth URL
- your client is reading a different MCP config file than the one you updated
Unauthorized
Usually this means:
- you are not signed in
- your token expired
- the login flow did not complete correctly
Forbidden
Usually this means:
- your account is not allowed to access that organization
- you tried to use a write tool without a Social Glass admin account
What works today
- MCP read access is self-serve for eligible Social Glass users
- write-capable MCP tools are available for Social Glass admins on the same server
- dynamic client registration is enabled
- Clerk user API keys are supported for durable bearer-token MCP auth when enabled for the workspace