Authentication

Stash MCP is an OAuth 2.1 protected resource. Claude handles the flow automatically.

Endpoints

• GET /.well-known/oauth-authorization-server
• GET /.well-known/oauth-protected-resource
• POST /oauth/register (RFC 7591)
• GET {STASH_BASE_URL}/connector/callback — browser authorization (advertised as authorization_endpoint in metadata)
• POST /oauth/token
• POST /oauth/revoke

Scopes

• mcp:data:read — the six tools listed in the connector.
• mcp:owners:read — owner PII. Enterprise plan.
• mcp:propensity:read — propensity score and farm lists. Enterprise plan.

Revoke access

Disconnect a Claude client at your dashboard.