Back to the catalog

Gentkey

One MCP URL for all your connectors — scoped writes, enforced constraints, and a full audit trail.

Open source Repository Open in the app JSON README (API)

About

One MCP URL for all your connectors — scoped writes, enforced constraints, and a full audit trail.

Details

Kind
MCP servers
Topic
No topic detected
Publisher
com.gentkey
Origin
official
Category
ferramentas
Transport
http
Version
0.1.0
Last push
2026-08-27T20:39:19Z
Repository state
ativo
Added
2026-08-29 03:01:08
Updated
2026-08-29 03:01:08
Origin id
com.gentkey/mcp

README

# Gentkey

**One MCP URL for all your connectors.**

Connect your accounts once at [gentkey.com](https://gentkey.com). Every AI surface — claude.ai (web & mobile), Claude Code, Cursor, any MCP client — reaches all of them through a single OAuth-protected MCP endpoint:

```
https://app.gentkey.com/mcp
```

Providers give an agent a key to the whole house. Gentkey cuts it a key to one room — and you can take it back at any time.

## Why

Connectors are a commodity; turning a coarse OAuth token into scoped, revocable, auditable capabilities is the point:

- **Capability-scoped writes.** Read tools work out of the box (switchable off per connection). Write tools require an explicit capability grant you make in the dashboard.
- **Enforced constraints.** Grants are bounded per call (e.g. *max $50 budget delta*) and per rolling window (writes / targets / dollars per hour or day).
- **Dry runs.** Every write tool advertises a `dry_run` flag that reports exactly what the real call would do — including the policy verdict, even before a grant exists — with no side effects.
- **Full audit trail.** Every decision is recorded (allowed / denied / constraint-denied / dry-run) with a human-readable plan summary — *"Change 'Summer Sale' budget: $50 → $80"*, not `grant:abc`.
- **Server-side credentials.** Upstream credentials are encrypted at rest (AES-256-GCM, AAD-bound; optional Cloud KMS envelope encryption) and injected server-side. The model never sees them.

## Connect a client

Create an account at [app.gentkey.com](https://app.gentkey.com/sign-in?mode=up), connect your services, then point your client at the endpoint. Authentication is OAuth 2.0 with dynamic client registration — no API keys to paste.

**claude.ai (web & mobile)** — Settings → Connectors → *Add custom connector* → `https://app.gentkey.com/mcp`

**Claude Code**

```sh
claude mcp add --transport http gentkey https://app.gentkey.com/mcp
```

**Cursor** — add to `~/.cursor/mcp.json`:

```json
{ "mcpServers": { "gentkey": { "url": "https://app.gentkey.com/mcp" } } }
```

Any other client that speaks Streamable HTTP with OAuth works the same way.

## What you can connect

- **Native connectors** with deep, semantic constraints: Google Ads (operation-typed capability grants, dollar caps on budget changes), Meta Ads (currency-aware budget deltas, dry-run plan/commit), BigQuery (statement-typed grants), Apple Search Ads, App Store Connect, Google Search Console, RevenueCat, and Superwall (per-resource capability maps).
- **A directory of 1,798 services** reachable by MCP passthrough, OpenAPI, or GraphQL — Notion, Linear, Slack, Stripe, Figma, Canva, Atlassian, HubSpot, Supabase, Sentry, and more. Upstream tools are proxied verbatim (schemas included) but default to write-gated: only curated read tools run without a grant, and every call is audited either way.

Full list with per-connector grant taxonomies: [docs/connectors.md](docs/connectors.md).

## About this repository

Gentkey's source is proprietary. This repository hosts the public documentation, the MCP registry manifest ([`server.json`](server.json)), and the **issue tracker** — bug reports, questions, and connector requests are welcome in [Issues](../../issues).

- [Connector catalog & grant taxonomies](docs/connectors.md)
- [Security model](docs/security.md)
- [FAQ](docs/faq.md)

- Website: [gentkey.com](https://gentkey.com)
- App: [app.gentkey.com](https://app.gentkey.com)
- MCP endpoint: `https://app.gentkey.com/mcp` (Streamable HTTP, OAuth 2.0 + dynamic client registration)

More