Connect
Connect an agent from the Thirdfy dashboard to Claude, ChatGPT, Cursor, any MCP client or the CLI with OAuth, or create an agent key for a server.
Connect at thirdfy.com/connect is how your agent reaches Thirdfy. Use your own model and client. Thirdfy is the part that touches money: one connection to every certified protocol, under the policy you set.
There are two ways in:
| Way | For | How it signs in |
|---|---|---|
| OAuth | Claude, ChatGPT, Cursor, Claude Code, other MCP clients, the CLI | You sign in on auth.thirdfy.com and pick the agent |
| Agent key | Servers and hosted agents that can't do OAuth | A bearer key you create on this page |
Connect a client
Pick your client in the tabs. Each one adds the Thirdfy MCP server:
The client then opens auth.thirdfy.com. Sign in with your Thirdfy account and choose:
- Agent. The agent the client acts for. No agent yet? Create one right there.
- Read and Trade within your agent's limits. Read is always on. Trade lets the client make writes within the agent's policy.
- Stay connected. Keep access for up to 30 days without signing in again.
| Tab | Where you add the server |
|---|---|
| Claude | Settings → Connectors → Add custom connector |
| ChatGPT | Settings → Connectors → Create |
| Cursor | Settings → MCP → Add server, type HTTP |
| Other MCP clients | Any client with remote MCP and OAuth, using streamable HTTP. Without OAuth, use an agent key |
| Server or hosted agent | Points you to Agent key below and shows the Authorization: Bearer header |
Step-by-step guides for each client: MCP client guides.
Connect this agent on an agent's page opens Connect with that agent already picked under Agent key. With OAuth, you pick the agent when you sign in on auth.thirdfy.com.
Connect the CLI
The CLI tab signs in from your terminal. It opens your browser for the same OAuth sign-in.
With the CLI installed, run thirdfy-agent login for read access or thirdfy-agent login --trade to allow writes. whoami shows the agent and its policy. Details: Agent CLI authentication.
Connected apps
Every app that signed in with OAuth is listed at auth.thirdfy.com/connections: the agent it acts as, its access, and when it ends. Revoke ends an app's access right away. Settings links there too.
Agent key
Servers and hosted agents that can't sign in with OAuth use an agent key. The key acts as one agent, inside its policy.
- Under Agent key, pick the agent.
- Click Create a key.
- Copy it now. It is shown once. Store it in your agent's secrets right away.
When the key is shown, the page gives you three ready blocks to copy:
| Block | Use it for |
|---|---|
| Environment variable | THIRDFY_AGENT_API_KEY=... for the CLI, scripts and Hermes |
| MCP server | The MCP URL and an Authorization: Bearer ... header, for Claude Managed Agents or your own server |
| Give this to your agent | A short prompt that tells your agent how to connect |
Later the page shows only the last characters of the active key.
| Button | What it does |
|---|---|
| Create a new key | Makes a new key. The current key stops working at once. Update every server that uses it |
| Revoke and pause | The key stops working and the agent is paused. A new key does not resume it; resume on Policy |
Never paste the key into a chat. Send it as a header from your server or store it in your client's secrets.
Related
- MCP client guides: Claude, Claude Code, Cursor, ChatGPT and more
- Agent CLI authentication:
login,whoamiand keys - Policy: What a connected agent may do