- OAuth (recommended). Sign in from inside your client; a browser window handles consent. There is no key to copy, and the client refreshes the session for you.
- API key. Pass a Mesa API key as an
Authorization: Bearerheader. Use a repo-scoped key when you want to limit the agent to specific repositories.
Claude Code
Add the server with the CLI, then authenticate:/mcp, select mesa, and choose Authenticate. A browser window opens for OAuth sign-in.
Use an API key instead of OAuth
Use an API key instead of OAuth
Pass the key as a header when you add the server:With a header set, the connection is authenticated immediately.
Codex
Add the server to~/.codex/config.toml:
Use an API key instead of OAuth
Use an API key instead of OAuth
Point Codex at an environment variable holding your key:
Cursor
Add the server to.cursor/mcp.json in your project (or ~/.cursor/mcp.json to make it global):
OpenCode
Add the server toopencode.json (project root) or ~/.config/opencode/opencode.json:
Use an API key instead of OAuth
Use an API key instead of OAuth
Disable OAuth for the server and pass the key as a header (note OpenCode’s
{env:VAR} interpolation — no $):Claude Desktop & Cowork
Open Settings → Connectors → Add custom connector, name itmesa, and enter the URL:
Clients without native remote support
If your client only speaks stdio, bridge to the remote server withmcp-remote:
mcp-remote runs the OAuth flow and caches the token, so the bridged client gets the same sign-in experience.
