Docs / MCP
Let your agent run the tab.
One URL. Any MCP client reads spend, closes a tab, changes a cap, as you and only as far as your role allows.
Server
https://console.flocktab.com/api/mcp
Streamable HTTP with OAuth. Your client opens the console; you approve; nothing to paste. Agents can read this page as plain markdown at /docs/mcp.md.
Set up
Claude Code
Add the server, then run /mcp inside Claude Code, pick flocktab and Authenticate.
claude mcp add --transport http flocktab https://console.flocktab.com/api/mcp
Codex
Add the server, then sign in once; the browser opens the console.
codex mcp add flocktab --url https://console.flocktab.com/api/mcp codex mcp login flocktab
Cursor
In .cursor/mcp.json (or ~/.cursor/mcp.json for every project). Cursor asks you to connect the first time.
{ "mcpServers": { "flocktab": { "url": "https://console.flocktab.com/api/mcp" } } }claude.ai and Claude Desktop
Settings, Connectors, Add custom connector. Paste the URL and connect.
https://console.flocktab.com/api/mcp
Any other MCP client
Streamable HTTP with OAuth. Point it at the URL; it discovers the rest.
https://console.flocktab.com/api/mcp
Access
- The agent acts as the person who approved it, in the flock they chose, with their role's permissions. Project-limited roles stay limited.
- Permissions are checked again on every call, so a role change or suspension applies at once.
- Nothing to paste: OAuth 2.1 with PKCE and dynamic client registration, like Resend's and Cloudflare's MCP servers. The console's sign-in, passkey and SSO rules apply to the approval.
- Access tokens last an hour and refresh themselves for 30 days. Account, Security, Connected apps lists every connection; Disconnect revokes it at once.
Tools
| Tool | What it does | Needs |
|---|---|---|
| whoami | The person and flock this connection acts for, and what their role allows. | signed in |
| list_tabs | Every Agent's tab: open or closed, cap, spend this window, project. | spend:read |
| get_spend | Spend for month, 7d, 30d or 90d: metered, outside, subscription use, by project, Agent and day. | spend:read |
| list_decisions | The latest ledger rows: each call the proxy allowed or refused, with its amount and reason. | spend:read |
| close_tab | Stop one Agent. Its next call is denied before the provider. | tabs:write |
| reopen_tab | Let a closed Agent spend again. | tabs:write |
| set_tab_cap | Change an Agent's cap, in dollars. | tabs:write |
| close_all_tabs | The kill switch: close every tab in the flock. | tabs:write, whole flock |
| open_all_tabs | Reopen every tab in the flock. | tabs:write, whole flock |
| list_outside_spend | Bills that never went through the tab (synced vendors and bills recorded by hand), largest first. | outside:read |
| record_outside_spend | Add spend that bypassed the tab (an invoice, a contract, a card charge). Team and Fleet. | outside:write |
| attribute_outside_spend | Give outside spend to a project, share it by Agent activity, or clear it. | outside:write, whole flock |
- Money is dollars as strings with cents, for example "12.34".
- Tools name Agents by slug, as list_tabs returns them.
- A tool the role does not allow answers with an error saying so. Do not retry it; ask the person.