**Source:** https://heykiku.com/help/mcp-getting-started

# Get started with the MCP server

The heykiku MCP server lets you [connect Claude and Cursor to your knowledge base](https://heykiku.com/features/connect), so Claude Code, Cursor, or Claude Desktop can query your agency knowledge as a tool — the same role-aware knowledge your team uses in the dashboard, available inside your AI client. Document tools are read-only, and queries respect your role's access tiers. `flag_kiku` records review metadata — it does not write documents. (MCP — Model Context Protocol — is the open standard these clients use to call external services.)

MCP access is included with the Bloom plan and draws from your plan's message budget when you use `ask_kiku`.

MCP can answer questions, search knowledge, list folders, read document metadata or extracted text, and flag an answer for review. It cannot upload files, edit documents, change folders, approve drafts, invite teammates, or update billing. `flag_kiku` is review metadata for Questions to answer, not a document write. Use the web app for uploads and workspace changes.

## Supported clients

heykiku's MCP server is tested against three clients: Claude Code, Cursor, and Claude Desktop. Setup instructions for each are in the connection guide.

## How authentication works

MCP uses OAuth. When you connect a client, heykiku opens a browser consent flow to grant `read` scope for your workspace. The OAuth token is workspace-scoped — a token from workspace A does not work in workspace B.

OAuth is the MCP setup path. Static API keys are meant for the REST API and server-to-server fallbacks (CI jobs, custom HTTP clients) — don't wire one into your MCP client when OAuth is available; OAuth tokens are read-only by design and revocable per client.

Both OAuth and REST API paths use the same role and access-tier rules. A freelancer sees general knowledge only. Employees see general and internal. Admins can also see sensitive. Owners can see owner-only.

## What MCP sees versus the web app

The MCP server exposes the same knowledge your role can access in the heykiku dashboard — nothing more. The `whoami` tool shows your accessible tier, workspace, and quota.

## Revocation

To revoke MCP access, go to Account → Connected apps and remove the OAuth connection for the client you want to disconnect.

## Related terms

- [Agency Tech Stack](https://heykiku.com/glossary/agency-tech-stack)
- [Agency Knowledge Base](https://heykiku.com/glossary/agency-knowledge-base)
- [Tribal Knowledge](https://heykiku.com/glossary/tribal-knowledge)