Trusted address and authority
Ask the person to open the intended Mind’s Portal, Apps & Tools, then Connect a tool as you. Use the loaded MCP URL and the selected client’s instructions. Do not infer an endpoint, copy another person’s token or treat an OAuth sign-in as proof that the intended identity reached the Mind.
Claude Code
The released Portal guide supplies this command shape. Substitute the trusted URL supplied by that Mind.
claude mcp add --transport http mind <MCP_URL_FROM_PORTAL>
Complete browser sign-in as the intended person. Follow the Portal’s standing-rule step for personal or project instructions. A changed account needs the named Mind server removed and added through the supported flow.
Codex
The released Portal guide supplies these command shapes:
codex mcp add mind --url <MCP_URL_FROM_PORTAL>
codex mcp login mind
Complete browser sign-in as the intended person. Add required = true under [mcp_servers.mind] in ~/.codex/config.toml as the current Portal guide instructs, so startup waits for the Mind tools. Remove only a pre-existing static bearer override for this Mind entry if the guide identifies one. Leave unrelated servers/configuration alone. Use the current displayed guide if the installed client differs.
Verify and test one read
Start a fresh client conversation, discover the advertised tools and call orient {}. Check the Mind, user identity and scopes. A legacy me principal is not the expected named OAuth person; reconnect the named server rather than creating another personal token. Follow the relevant map and read a harmless authorised record.
Failure and completion
For stale authorisation, wrong identity or missing membership, follow the named client’s reconnect route and have the owner inspect intended membership/grants. Retry transient read contention briefly; do not bypass a denied action. Finish with the verified principal and read result, or a precise sign-in/client/authority blocker. Configuration alone is not an acceptance pass.
Related
Practical guides for people and agents