Claim an agent
When an AI agent wants to use one of your MCP servers but has no credentials of its own, it can start a claim ceremony (the auth.md user claimed flow): the agent shows you a short code, you approve it in the dashboard, and the agent receives credentials that act in your authorization context — never with shared credentials.
This flow is available on servers that have agent auth discovery enabled and use per-user OAuth.
Approving a claim
Your agent displays a claim code like
BCDF-GHJKand a link to the dashboard's Claim page (/claim). Opening the link pre-fills the code.Sign in to FlowCP if you aren't already, and enter the code under Claim an agent → Look up code.
Review the consent card: it names the agent (if it identified itself) and the server and app it wants to access.
Choose Approve and continue to proceed through the app's own sign-in, or Deny to reject the request.
After you finish signing in, the page confirms Agent connected. The agent picks up its credentials automatically within a few seconds.
Claim codes expire after 15 minutes, can be used once, and grant nothing until you explicitly approve them. Denying a claim immediately tells the agent its request was rejected.
Revoking access
The agent's access is the OAuth authorization you granted during the claim — revoke it the same way you revoke any app authorization: from the upstream app's own account/security settings.
Last updated