Text

https://api.gessa.ai/mcp/rpc

The server advertises Protected Resource Metadata and Authorization Server Metadata. claude.ai should identify a CIMD or pre-registered client, redirect the user through /oauth/authorize, require PKCE S256, request the resource value for /mcp/rpc, and exchange the code at /mcp/auth/token. Production Dynamic Client Registration is disabled.

Verification: after authorization, ask claude.ai to call engine_get_engine_spec and workspace_list.