Connect your agent to Core Edge.
Core Edge is CLI-first, but agents that cannot use a shell can still access a Core namespace through hosted or local MCP.
Endpoint
https://core-edge.slayteksystems.com/mcp
Connect your host
Signing in does not create an account. You need an admitted account for The Core. A verified date appears only where a dated host receipt exists.
| Host | Steps | Sign-in | Verified |
|---|---|---|---|
| Claude Code |
| OAuth sign-in. Its callback is admitted on this server. | Not yet verified |
| claude.ai and Claude desktop |
| OAuth sign-in. Its callback is admitted on this server. | Not yet verified |
| Codex |
| OAuth sign-in. Its callback is admitted on this server. | Not yet verified |
| ChatGPT |
| OAuth sign-in. Its callback is admitted on this server. | Not yet verified |
| Cursor |
| OAuth sign-in. Its callback is admitted on this server. | Not yet verified |
| VS Code |
| OAuth sign-in is not available yet. This server does not admit the vscode.dev and insiders.vscode.dev callback, so registration fails. An unattended setup can send a machine key as a bearer header instead. | Not yet verified |
| Windsurf |
| Not confirmed. The Core has not checked this host's sign-in callback or header support. | Not yet verified |
| Gemini CLI |
| OAuth sign-in. Its callback is admitted on this server. | Not yet verified |
| JetBrains AI Assistant |
| Not confirmed. The Core has not checked this host's sign-in callback or header support. | Not yet verified |
Choose a connection path
| Client capability | Use this path | Authentication |
|---|---|---|
| Can run terminal commands | Use the core-edge CLI. After installation, core-edge skill --install can install the matching local skill. |
Humans install the Core Edge CLI, run core-edge login and finish the browser or device sign-in. Human credentials stay in the operating system's credential store. Do not use a machine key with core-edge login. |
| Can call hosted Streamable HTTP MCP with bearer auth | Point the client at the hosted /mcp endpoint. |
Configure Authorization: Bearer <machine-key> or the bearer-token field your client provides, from the client's secret settings. |
| Supports OAuth/Mixed Auth for remote MCP | Add the MCP URL. The client discovers sign-in through its metadata document, or Dynamic Client Registration when offered. | Sign in to The Core and choose the spaces to grant. No key is needed. |
Learn the operating model
Connection is only the first step. Read the complete agent operating guide for spaces, search-before-write, typed records, links, the first useful shared context, and second-agent continuity.
Create a machine key
An unattended agent uses its own read or write machine key. An account admin creates it on the Agent keys page at https://core-edge.slayteksystems.com/app/agent-keys. Inject it through the agent's secret environment as CORE_AUTH_TOKEN and set CORE_AGENT_NAME. An MCP client without OAuth sends the same key as a bearer token from its secret settings. Machine keys are never admin, owner or namespace-admin credentials. Never put a key in chat, source control, a shell profile or a command argument.
Admins can also create one from the CLI. The mcp purpose label is provenance only; role and space grants are the access boundary.
core-edge keys create my-agent --role write --purpose mcp
Use read instead of write for read-only connectors.
OAuth clients
For remote hosted clients that support OAuth or Mixed Auth, use these values:
- MCP URL:
https://core-edge.slayteksystems.com/mcp - Registration method: Client ID Metadata Document, or Dynamic Client Registration as the fallback
- Token endpoint auth method:
none - Default scope:
core
Discovery endpoints:
https://core-edge.slayteksystems.com/.well-known/oauth-protected-resourcehttps://core-edge.slayteksystems.com/.well-known/oauth-authorization-serverhttps://core-edge.slayteksystems.com/oauth/register
Hosted MCP clients connect to https://core-edge.slayteksystems.com/mcp. When the client supports OAuth, a human signs in to The Core in the client's sign-in window and chooses which spaces the client may read or write. No key is entered on the sign-in page. Installing a plugin or adding the URL does not create an account or grant access.
Security boundary
MCP receives the same space-scoped access as the machine key or the spaces approved at sign-in. Key management, hard delete, approval review, migrations, raw arbitrary API requests, and operator controls are not exposed through the default MCP tool surface.