The current setup paths
- Remote connector: add a trusted remote MCP URL through Claude’s Connectors settings and authenticate with OAuth when the service supports it.
- Claude Desktop extension: install an Anthropic-reviewed or organization-approved local extension from Settings > Extensions.
- Claude Code: use
claude mcp addfor remote HTTP servers or local stdio processes, then verify with/mcp. - Manual Desktop JSON: use
claude_desktop_config.jsononly when a local server is not available as a Desktop Extension and you understand its runtime and permissions.
Model Context Protocol, or MCP, is an open standard for connecting an AI application to external data, tools, and workflows. In Claude, an MCP connection may expose read-only resources, searches, calculations, or actions that change another system. The setup is straightforward; the important work is choosing the right connection method and granting only the access the workflow needs.
Current as of August 15, 2026
For cloud services, prefer reviewed remote connectors and OAuth. For local tools, prefer Claude Desktop Extensions or a narrowly scoped stdio server. Do not copy an abandoned package name, long-lived personal access token, or old settings screenshot from a tutorial without checking the provider’s current documentation.
How MCP Fits Together
An MCP client, such as Claude, connects to an MCP server. The server advertises capabilities such as tools and resources. A local stdio server runs as a process on your computer. A remote server is reached over the network, normally through HTTP. Claude’s connectors use the same MCP foundation but provide account-level discovery, authentication, and governance around remote services.
| Need | Recommended path | Key boundary |
|---|---|---|
| Hosted SaaS or company service | Claude remote connector or Claude Code HTTP server | Public reachability, OAuth scopes, and organization approval |
| Local application packaged for Claude Desktop | Desktop Extension | Extension trust, configured paths, and tool permissions |
| Developer-owned local process | Claude Code stdio or manual Desktop JSON | Executable provenance, runtime, filesystem scope, and secrets |
Path 1: Add a Remote Connector in Claude
Remote custom connectors are available in Claude and Claude Desktop. They are configured through the Claude account, and the connection originates from Anthropic’s cloud infrastructure—not from the laptop’s private network. The server must therefore be reachable from Anthropic’s published IP ranges. A private hostname that works only on your VPN will not work as a remote connector without an approved network design.
For Pro and Max accounts
- Open Customize > Connectors in Claude.
- Select +, then Add custom connector.
- Enter the remote MCP server URL supplied by the provider.
- If required, configure the provider’s OAuth client details in Advanced settings.
- Finish setup, authenticate, and enable the connector only in conversations that need it.
For Team and Enterprise
An Owner or Primary Owner first adds the service under Organization settings > Connectors. Members then connect their own identities under Customize > Connectors. That separation matters: organization approval determines which connector is available, while the member’s provider identity determines which data and actions the connector can reach.
Prefer OAuth over pasted bearer tokens
OAuth supports explicit scopes, user-specific authorization, refresh, and revocation. If a server only accepts a manually supplied secret, store it through the supported secret mechanism and keep its privileges and lifetime as narrow as possible.
Path 2: Install a Local Claude Desktop Extension
Desktop Extensions package a local MCP server and its dependencies as an .mcpb file. Anthropic’s current workflow avoids hand-editing JSON for supported extensions:
- In Claude Desktop, open Settings > Extensions.
- Select Browse extensions and choose an Anthropic-reviewed tool, or use Advanced settings > Install Extension for an organization-approved
.mcpbfile. - Configure only the folders, accounts, or API settings the workflow requires.
- Restart Claude Desktop if the tools do not appear, then verify the extension’s settings and permissions.
Team and Enterprise owners can allow or block public extensions and distribute approved custom extensions. A one-click package improves installation, but it does not remove the need to review what the server can read, write, execute, or send across the network.
Path 3: Add MCP to Claude Code
Claude Code manages MCP connections with the claude mcp command. Use HTTP for a remote service and stdio for a trusted local process.
Remote HTTP server
claude mcp add --transport http company-tools https://mcp.example.com/mcp
# In an interactive Claude Code session, authenticate and inspect status:
/mcpFor a remote server that responds with an authentication challenge, Claude Code can complete OAuth from the interactive /mcp screen. The current documentation recommends HTTP for remote MCP services. Use the exact URL and authentication method published by the server owner.
Local stdio server
# Everything after -- is the local server command and its arguments.
claude mcp add --transport stdio local-tools -- /absolute/path/to/trusted-mcp-server --allowed-root /absolute/path/to/project
claude mcp get local-tools
claude mcp listUse an absolute executable path where practical, pin or approve the server version, and scope filesystem arguments to a project rather than a home directory or disk root. Install the runtime required by that specific server; MCP itself does not require a GPU.
Choose the right scope
- Local: available only to you in the current project; appropriate for private experiments and machine-specific paths.
- Project: stored in the project’s
.mcp.jsonso a reviewed configuration can be shared with the team. - User: available to you across projects; reserve it for broadly useful, trusted services.
Use --scope project or --scope user only when the broader reach is intentional. Review shared project configuration like executable code because accepting a workspace may cause its local server definitions to run.
When Manual Claude Desktop JSON Is Appropriate
Local MCP servers configured in claude_desktop_config.json remain a separate mechanism from remote connectors. Use manual configuration when the local server is not packaged as a Desktop Extension and its publisher documents the command, arguments, and required environment clearly.
Minimal local-server shape
{
"mcpServers": {
"local-tools": {
"type": "stdio",
"command": "/absolute/path/to/trusted-mcp-server",
"args": ["--allowed-root", "/absolute/path/to/project"]
}
}
}Fully quit and reopen Claude Desktop after a manual configuration change. If the server fails, validate the JSON, executable path, runtime, permissions, and logs. Never paste a real token into a tutorial, screenshot, repository, or support thread.
Security Review Before You Connect
- Verify the publisher and transport. A server can change behavior after installation; monitor updates and remove abandoned integrations.
- Review every requested permission. Limit OAuth scopes, folders, databases, repositories, and write actions to the minimum business need.
- Expect prompt-injection risk. A server that retrieves external content may return malicious instructions. Keep high-impact tools disabled unless the task requires them.
- Approve actions deliberately. Review tool names, inputs, targets, and destructive effects before allowing a call. Use “always allow” only for tools safe to run unattended.
- Separate identities. Use a dedicated service identity for business automation when it improves least privilege, attribution, and revocation.
- Log and reassess. Record connector ownership, scopes, data classes, approval behavior, and an expiration or review date.
Troubleshooting Checklist
| Symptom | Check |
|---|---|
| Local server does not appear | Restart the client; verify JSON, executable path, runtime, and file permissions. |
| Remote connector cannot connect | Confirm the public HTTPS URL, Anthropic network reachability, transport, and provider status. |
| Tools are listed but denied | Review OAuth scopes, organization controls, tool permissions, and the source system’s access policy. |
| Claude proposes an unexpected action | Deny it, disable the tool, preserve context, and investigate the server output for prompt injection or changed behavior. |
For a personal workflow, the goal is a useful connection with narrow access. For an organization, the same setup becomes an identity, information governance, network, logging, and change-management decision. ITECS AI consulting and managed intelligence services help businesses build those integrations with durable controls.
Connecting Claude to business systems?
ITECS can design the connector, identity, permissions, hosting, and oversight around the business outcome.
Talk with ITECSSources
continue reading
More ITECS blog articles
About ITECS Team
The ITECS team consists of experienced IT professionals dedicated to delivering enterprise-grade technology solutions and insights to businesses in Dallas and beyond.
View full profile and articles