https://<your-superlog-host>/mcp
Authentication
Two authentication methods are supported.Personal Access Token
Mint a long-lived token in the dashboard and pass it in the
Authorization header. Best for local tools and scripts.OAuth 2.0
MCP clients that support OAuth can use the standard authorization code flow. Best for multi-user deployments and managed tools.
Personal Access Token (PAT)
PATs are prefixedsuperlog_pat_... and are created in Settings → API Tokens. Pass one in the Authorization header of every MCP request:
Creating a PAT
1
Open API Tokens
Go to Settings → API Tokens in the Superlog dashboard.
2
Click New Token
Click the New Token button in the top-right corner.
3
Fill in the details
Enter a descriptive name, select the project this token defaults to, and choose an expiry: 30 days, 90 days, or never.
4
Copy the token
Copy the full token value now — it is shown only once and cannot be recovered. If you lose it, revoke it and create a new one.
OAuth 2.0
MCP clients that support OAuth discover Superlog’s authorization server automatically via the protected-resource metadata endpoint:Configuring Your MCP Client
Claude Desktop
Add asuperlog entry to ~/.claude_desktop_config.json:
Cursor and Other HTTP MCP Clients
Configure the MCP server in your client’s settings:Quick Install via Coding Agent
If your AI assistant supports tool-based setup, ask it to run the following prompt — Superlog’s skills package will detect your MCP client and configure everything automatically:Token Scopes
Managing PATs via the API
You can also manage PATs programmatically using the REST API. All three endpoints require a valid user session (cookie or OAuth token).List tokens
Create a token
Response — includes
plaintext (the full token value, shown once):
Revoke a token
{"ok": true} on success. Returns 404 if the token does not exist or belongs to another user.
Related
- MCP Tool Reference — complete list of all tools and their parameters