MCP (Model Context Protocol) is an open standard for connecting AI models to external tools and data sources. Runtype supports both built-in MCP integrations and custom MCP servers.
MCP servers provide tools that AI models can call during flow execution. Unlike simple HTTP tools, MCP servers offer:
Save an MCP server once, use it across all flows.
Response:
mcp:<server>:*)To attach every tool a saved server exposes — current and future — include a single wildcard entry in toolIds:
The wildcard is expanded into concrete tool ids at execution time, so:
toolConfigs, perToolLimits, and usage tracking still operate on real, fully-qualified tool ids.mcp:mynotion:* + mcp:mynotion:create_page), the wildcard wins and the curated picks are skipped.Use passthrough when you trust the server end-to-end and want the agent to pick up new capabilities without configuration changes. Use the curated form (specific tool ids) when you want an explicit, audited subset.
Pass server configuration inline for dynamic use cases.
MCP servers support multiple authentication methods:
Some MCP servers protect their tools with OAuth instead of a static token. For these servers, Runtype handles the full OAuth 2.1 authorization in the dashboard, so you authorize once in the browser and never paste a token by hand.
When you enter an MCP server URL in the dashboard, Runtype probes the server to find out whether it requires OAuth2. This uses RFC 9728 protected-resource discovery to locate the server’s authorization server.
If OAuth2 is detected, Runtype surfaces a Connect with OAuth2 option instead of asking you for a manual token. The discovered issuer and scopes appear so you can confirm you’re authorizing the right provider.
Detection works for real RFC 9728 servers, including ones whose authorization-server metadata lives only at the host root but reports a path-based issuer (for example, mcp.grafana.com/mcp).
Clicking Connect with OAuth2 opens a popup where you sign in and approve access with the provider. Runtype uses PKCE for the exchange, so no client secret is handled in the browser.
After you approve, the popup closes and the server’s tools appear for selection. You can then pick the tools you want, exactly as you would for any other MCP server.
If OAuth2 is not detected, an expandable diagnostics panel shows what each discovery phase tried — the URL it probed, the response status, and any error. Use this to troubleshoot servers that should support OAuth2 but aren’t being detected.
OAuth2 setup, auto-detection, and tool discovery are available in both places you add an MCP server:
Previously-configured OAuth2 servers now appear correctly in the agent tool-selection modal, showing their discovered tool count rather than appearing unconfigured.
MCP tool IDs follow this pattern:
Examples:
mcp:context7:resolve-library-id - Context7 documentation servermcp:myslack:send_message - Your saved Slack servermcp:github:create_issue - Your saved GitHub serverFor runtime servers, tool IDs become:
The reserved * toolName is the passthrough wildcard — see Passthrough Mode above:
Saved servers can have environment-specific configurations:
Specify environment in dispatch:
MCP tools work alongside other tool types:
Credential Security
allowedTools when possibletimeout value (max 60000ms)api_key, ensure headerName is correctGET /mcp/tools to verify discoveryallowedTools filter if settools/list endpoint