Skip to content
Oblique Docs

MCP server

Oblique provides a remote MCP ↗ server that lets you use Oblique from MCP clients such as Claude. The MCP server supports the same operations as the Oblique API and is authorized as your user, so both admins and end users can use it to take actions, like reading current group membership, making access requests, or configuring policies.

How the MCP server works

Section titled “How the MCP server works”

Endpoint

Section titled “Endpoint”

The MCP server endpoint depends on your tenant’s region:

https://us.oblique.security/api/mcp/v1

Authentication

Section titled “Authentication”

Oblique’s MCP server uses OAuth 2.0 for authentication, and streamable HTTP for transport. Any Oblique user can create an MCP client connection to Oblique, and the MCP client acts as you, with your permissions in Oblique.

When you connect a client, you can choose the OAuth scope for the connection. The Oblique MCP server supports two scopes:

  • Standard: Read all information available to you in Oblique, and create requests.
  • Privileged: Read all information available to you in Oblique, and write changes directly.

Authentication automatically expires after 24 hours, at which point you will need to reauthenticate. This expiry is not configurable.

Audit logs

Section titled “Audit logs”

Actions taken through the MCP server are recorded in Oblique’s audit logs the same way as actions taken in the Oblique app. Each event records the user as the author and the MCP client used as the client. You can filter audit logs by client to see all actions taken through MCP.

Connect an MCP client

Section titled “Connect an MCP client”

Claude

Section titled “Claude”

In Oblique, click on your profile picture in the upper right corner, select Account settings, then navigate to the MCP page:

  1. Select Add to Claude.
  2. In Claude, you will see a dialog to Add custom connector. This is already filled in with the Name and the Remote MCP server URL for the endpoint for your tenant’s region. Select Add.
  3. Once the MCP server is added, you will need to connect to it. Select Connect.
  4. Select the desired scopes to authorize the MCP server, then select Authorize.

Claude Code

Section titled “Claude Code”

  1. In your terminal, run:

    Terminal window
    claude mcp add --transport http oblique https://us.oblique.security/api/mcp/v1

  2. In Claude Code, run /mcp to see the list of configured MCP servers.

  3. Use the arrows to select Oblique.

  4. Select Authenticate. Claude Code opens a browser window to authenticate Oblique. Select the desired scopes to authorize the MCP server, then select Authorize.

  5. Press enter in your terminal.

Cursor

Section titled “Cursor”

In Oblique, click on your profile picture in the upper right corner, select Account settings, then navigate to the MCP page:

  1. Select Add to Cursor.
  2. In Cursor, under Install MCP Server?, you will see a configuration already filled in with the Name, Type and URL for the MCP server endpoint for your tenant’s region. Select Install.
  3. Once the MCP server is added, you will need to connect and authenticate to it. Select Connect.
  4. Select the desired scopes to authorize the MCP server, then select Authorize.

Other MCP clients

Section titled “Other MCP clients”

Any MCP client that supports remote MCP servers with OAuth 2.0 authentication can connect to Oblique. Configure the client with the endpoint for your region, then complete the OAuth flow when prompted.

Disconnect an MCP client

Section titled “Disconnect an MCP client”

You cannot currently disconnect the Oblique MCP server from your MCP client from within Oblique. Authentication automatically expires after 24 hours, at which point the connection will stop working until you reauthenticate.

You may be able to disconnect your MCP client from the Oblique MCP server.

Claude

Section titled “Claude”

Claude allows you to both disconnect the MCP server (without removing it), or remove it.

To disconnect the MCP server from Claude, navigate to Customize, then Connectors:

  1. Find the Oblique connector in your list of connectors, then select it.
  2. In the upper right, select Disconnect.
  3. In the dialog, confirm that you would like to disconnect the MCP server and select Disconnect.

To remove the MCP server from Claude, navigate to Customize, then Connectors:

  1. Find the Oblique connector in your list of connectors, then select it.
  2. In the upper right, select the more icon, then select Remove.
  3. In the dialog, confirm that you would like to remove the MCP server and select Remove.

Claude Code

Section titled “Claude Code”

Claude Code allows you to both disconnect the MCP server (without removing it), or remove it.

To disconnect the MCP server from Claude Code:

  1. In your terminal, run /mcp.
  2. Navigate the list of MCP servers using arrow keys to find the Oblique MCP server. Hit enter.
  3. To disconnect the MCP server, select Disable.

To remove the MCP server from Claude Code:

  1. In your terminal, run claude mcp remove oblique.

Cursor

Section titled “Cursor”

In Cursor, to move the MCP server, navigate to Settings then to Plugins:

  1. In the list of plugins, find or search for Oblique and select it to open it.
  2. In the upper right, select Uninstall.