How to Set Up Model Context Protocol (MCP) in Claude

A current guide to setting up Model Context Protocol in Claude through remote connectors, Claude Desktop Extensions, Claude Code, or a narrowly scoped local JSON configuration. It covers HTTP and stdio transport, OAuth, installation scopes, verification, troubleshooting, prompt-injection risk, tool approvals, and least-privilege governance.

Back to Blog
(Updated )
7 min read
Conceptual illustration of an AI assistant connected through MCP to files, a database, a code repository, and an API

The current setup paths

  • Remote connector: add a trusted remote MCP URL through Claude’s Connectors settings and authenticate with OAuth when the service supports it.
  • Claude Desktop extension: install an Anthropic-reviewed or organization-approved local extension from Settings > Extensions.
  • Claude Code: use claude mcp add for remote HTTP servers or local stdio processes, then verify with /mcp.
  • Manual Desktop JSON: use claude_desktop_config.json only when a local server is not available as a Desktop Extension and you understand its runtime and permissions.

Model Context Protocol, or MCP, is an open standard for connecting an AI application to external data, tools, and workflows. In Claude, an MCP connection may expose read-only resources, searches, calculations, or actions that change another system. The setup is straightforward; the important work is choosing the right connection method and granting only the access the workflow needs.

Current as of August 15, 2026

For cloud services, prefer reviewed remote connectors and OAuth. For local tools, prefer Claude Desktop Extensions or a narrowly scoped stdio server. Do not copy an abandoned package name, long-lived personal access token, or old settings screenshot from a tutorial without checking the provider’s current documentation.

How MCP Fits Together

An MCP client, such as Claude, connects to an MCP server. The server advertises capabilities such as tools and resources. A local stdio server runs as a process on your computer. A remote server is reached over the network, normally through HTTP. Claude’s connectors use the same MCP foundation but provide account-level discovery, authentication, and governance around remote services.

NeedRecommended pathKey boundary
Hosted SaaS or company serviceClaude remote connector or Claude Code HTTP serverPublic reachability, OAuth scopes, and organization approval
Local application packaged for Claude DesktopDesktop ExtensionExtension trust, configured paths, and tool permissions
Developer-owned local processClaude Code stdio or manual Desktop JSONExecutable provenance, runtime, filesystem scope, and secrets

Path 1: Add a Remote Connector in Claude

Remote custom connectors are available in Claude and Claude Desktop. They are configured through the Claude account, and the connection originates from Anthropic’s cloud infrastructure—not from the laptop’s private network. The server must therefore be reachable from Anthropic’s published IP ranges. A private hostname that works only on your VPN will not work as a remote connector without an approved network design.

For Pro and Max accounts

  1. Open Customize > Connectors in Claude.
  2. Select +, then Add custom connector.
  3. Enter the remote MCP server URL supplied by the provider.
  4. If required, configure the provider’s OAuth client details in Advanced settings.
  5. Finish setup, authenticate, and enable the connector only in conversations that need it.

For Team and Enterprise

An Owner or Primary Owner first adds the service under Organization settings > Connectors. Members then connect their own identities under Customize > Connectors. That separation matters: organization approval determines which connector is available, while the member’s provider identity determines which data and actions the connector can reach.

Prefer OAuth over pasted bearer tokens

OAuth supports explicit scopes, user-specific authorization, refresh, and revocation. If a server only accepts a manually supplied secret, store it through the supported secret mechanism and keep its privileges and lifetime as narrow as possible.

Path 2: Install a Local Claude Desktop Extension

Desktop Extensions package a local MCP server and its dependencies as an .mcpb file. Anthropic’s current workflow avoids hand-editing JSON for supported extensions:

  1. In Claude Desktop, open Settings > Extensions.
  2. Select Browse extensions and choose an Anthropic-reviewed tool, or use Advanced settings > Install Extension for an organization-approved .mcpb file.
  3. Configure only the folders, accounts, or API settings the workflow requires.
  4. Restart Claude Desktop if the tools do not appear, then verify the extension’s settings and permissions.

Team and Enterprise owners can allow or block public extensions and distribute approved custom extensions. A one-click package improves installation, but it does not remove the need to review what the server can read, write, execute, or send across the network.

Path 3: Add MCP to Claude Code

Claude Code manages MCP connections with the claude mcp command. Use HTTP for a remote service and stdio for a trusted local process.

Remote HTTP server

claude mcp add --transport http company-tools https://mcp.example.com/mcp

# In an interactive Claude Code session, authenticate and inspect status:
/mcp

For a remote server that responds with an authentication challenge, Claude Code can complete OAuth from the interactive /mcp screen. The current documentation recommends HTTP for remote MCP services. Use the exact URL and authentication method published by the server owner.

Local stdio server

# Everything after -- is the local server command and its arguments.
claude mcp add --transport stdio local-tools -- /absolute/path/to/trusted-mcp-server --allowed-root /absolute/path/to/project

claude mcp get local-tools
claude mcp list

Use an absolute executable path where practical, pin or approve the server version, and scope filesystem arguments to a project rather than a home directory or disk root. Install the runtime required by that specific server; MCP itself does not require a GPU.

Choose the right scope

  • Local: available only to you in the current project; appropriate for private experiments and machine-specific paths.
  • Project: stored in the project’s .mcp.json so a reviewed configuration can be shared with the team.
  • User: available to you across projects; reserve it for broadly useful, trusted services.

Use --scope project or --scope user only when the broader reach is intentional. Review shared project configuration like executable code because accepting a workspace may cause its local server definitions to run.

When Manual Claude Desktop JSON Is Appropriate

Local MCP servers configured in claude_desktop_config.json remain a separate mechanism from remote connectors. Use manual configuration when the local server is not packaged as a Desktop Extension and its publisher documents the command, arguments, and required environment clearly.

Minimal local-server shape

{
  "mcpServers": {
    "local-tools": {
      "type": "stdio",
      "command": "/absolute/path/to/trusted-mcp-server",
      "args": ["--allowed-root", "/absolute/path/to/project"]
    }
  }
}

Fully quit and reopen Claude Desktop after a manual configuration change. If the server fails, validate the JSON, executable path, runtime, permissions, and logs. Never paste a real token into a tutorial, screenshot, repository, or support thread.

Security Review Before You Connect

  • Verify the publisher and transport. A server can change behavior after installation; monitor updates and remove abandoned integrations.
  • Review every requested permission. Limit OAuth scopes, folders, databases, repositories, and write actions to the minimum business need.
  • Expect prompt-injection risk. A server that retrieves external content may return malicious instructions. Keep high-impact tools disabled unless the task requires them.
  • Approve actions deliberately. Review tool names, inputs, targets, and destructive effects before allowing a call. Use “always allow” only for tools safe to run unattended.
  • Separate identities. Use a dedicated service identity for business automation when it improves least privilege, attribution, and revocation.
  • Log and reassess. Record connector ownership, scopes, data classes, approval behavior, and an expiration or review date.

Troubleshooting Checklist

SymptomCheck
Local server does not appearRestart the client; verify JSON, executable path, runtime, and file permissions.
Remote connector cannot connectConfirm the public HTTPS URL, Anthropic network reachability, transport, and provider status.
Tools are listed but deniedReview OAuth scopes, organization controls, tool permissions, and the source system’s access policy.
Claude proposes an unexpected actionDeny it, disable the tool, preserve context, and investigate the server output for prompt injection or changed behavior.

For a personal workflow, the goal is a useful connection with narrow access. For an organization, the same setup becomes an identity, information governance, network, logging, and change-management decision. ITECS AI consulting and managed intelligence services help businesses build those integrations with durable controls.

Connecting Claude to business systems?

ITECS can design the connector, identity, permissions, hosting, and oversight around the business outcome.

Talk with ITECS

Sources

continue reading

More ITECS blog articles

Browse all articles

About ITECS Team

The ITECS team consists of experienced IT professionals dedicated to delivering enterprise-grade technology solutions and insights to businesses in Dallas and beyond.

View full profile and articles

Share This Article

Continue Reading

Explore more insights and technology trends from ITECS

View All Articles