CaseMgr now supports OAuth 2.0 authorization for MCP connections. This means Claude.ai (and any other OAuth-speaking MCP client) can connect to your CaseMgr instance through a browser-based login flow — no manual token copy-paste needed.
How It Works
- In Claude.ai, go to Settings → Integrations → Add Integration
- Enter
https://casemgr.systems/mcp - Claude.ai discovers the OAuth endpoints automatically
- A browser window opens — log in to CaseMgr and click Authorize
- Claude.ai receives an access token and connects
That’s it. All 184 MCP tools are available in your Claude.ai conversation.
Under the Hood
We implemented the full OAuth 2.0 Authorization Code flow with PKCE:
- Discovery —
/.well-known/oauth-protected-resourceand/.well-known/oauth-authorization-serverendpoints tell clients where to authenticate - Dynamic Client Registration — Clients register automatically via
/oauth/register - PKCE — S256 code challenge prevents authorization code interception
- Consent Page — Users see exactly what they’re authorizing
- Token Exchange — Authorization codes are exchanged for CaseMgr API tokens
The issued tokens are standard CaseMgr API tokens — the same format used by Claude Code and Cursor. They show up in your Tokens page where you can review and revoke them.
Supported Clients
The Tokens page has copy-paste configuration for:
- Claude.ai — OAuth flow (no token needed)
- Claude Code — Bearer token in
.mcp.json - Claude Desktop — Via
mcp-remotebridge - Cursor — Bearer token in
.cursor/mcp.json - VS Code Copilot — Bearer token in
.vscode/mcp.json - Windsurf — Bearer token in
mcp_config.json - Gemini CLI — CLI command or settings.json
- ChatGPT — Manual configuration in Settings
Tool Name Change
One thing we discovered during Claude.ai integration: it validates tool names against ^[a-zA-Z0-9_-]{1,64}$ — no dots allowed. Our tools used dots (cases.list), so we switched to hyphens (cases-list). The change happens at the protocol boundary — all internal code and documentation still works.