Endpoint
https://api.orriven.com/mcp
The only address the agent needs. Streamable HTTP. No local process.
Set up
The client discovers the auth endpoints, registers itself, and opens the consent page. Nothing is installed on the machine.
A custom connector. Claude registers with orriven and opens the console for you to allow it.
- 01
Open Settings → Connectors
Select Add custom connector.
- 02
Enter the endpoint
Enter https://api.orriven.com/mcp and confirm. Claude registers and starts the authorization redirect.
- 03
Allow access
Sign in if asked, review the redirect host, then Allow. Enable the connector in the conversation.
The first tool call opens the default browser. In a headless or remote session, the CLI prints a URL to open anywhere.
Add the server
claude mcp add --transport http orriven https://api.orriven.com/mcp
Confirm it is connected
claude mcp list
Any client that speaks Streamable HTTP and OAuth 2.1 (authorization code, PKCE, dynamic registration) can connect — Cursor, MCP Inspector, and apps built on the official MCP SDKs.
Server URL
https://api.orriven.com/mcp
Stdio (a local process) is not supported. For a binary on the machine, use the CLI.
Authorization
The first time a client connects with an account, the console shows the client name, the redirect host, and the same permissions that account has.
- If you are not signed in, sign in with password or company SSO, then return to this page.
- Check the redirect host: claude.ai for Claude.ai, localhost for a local tool. The name can be copied; the host cannot.
- Allow issues the token. Deny cancels. The same client is not asked again until the token expires or you remove it.
Only allow a request you started in this session. Do not allow a link from a message you did not expect.
Tools
MCP · CLI
Identity
whoami
The signed-in account.
list_organizations
Organizations and the role in each.
list_workspaces
Workspaces the account can open.
API keys
list_api_keys
Keys in a workspace. Revoked keys hidden by default.
create_api_key
Mint a secret key. The plaintext is returned once.
create_publishable_key
Mint a publishable key for a storefront origin.
set_publishable_key_origins
Replace the origin allowlist.
revoke_api_key
Revoke a key. It disappears from the default list.
Webhooks
list_webhook_event_types
Event types a webhook can subscribe to.
list_webhook_endpoints
Endpoints, including the signing secret.
create_webhook_endpoint
Register an endpoint.
update_webhook_endpoint
Change URL, events, or enabled state.
ping_webhook_endpoint
Send a test delivery.
list_webhook_deliveries
Recent deliveries for an endpoint.
resend_webhook_delivery
Replay a delivery.
Logs & metrics
list_api_request_logs
Filter by status, method, path, or key.
get_api_request_log
One request, including bodies.
get_api_metrics
Traffic for 1, 7, or 30 days.
What it does not do
- It does not create events, ticket types, or registrations. Issue a key, then call the Developer API.
- It does not accept API keys or console session tokens. Login is OAuth, as a person.
- It does not skip consent for a new client. The second visit from the same client does.
Disconnect
Remove the connector in the client — Connector settings in Claude.ai, or the command below in Claude Code. Access tokens last one hour, renew while in use, and expire after seven days idle.
claude mcp remove orriven
Questions
- Which agents can connect?
- Any client that speaks remote MCP over Streamable HTTP and OAuth 2.1. Claude.ai custom connectors, Claude Code, Cursor, and MCP Inspector are the ones already in use.
- Is this the same as the Developer API?
- No. MCP is the management surface: keys, webhooks, logs. Event data stays on `/v1` with an `osk_` key that MCP can mint.
- How do I remove it?
- Delete the connector in the client, or run `claude mcp remove orriven`. Tokens are not cached past a ban check.
Connect MCP to a workspace
We will walk the consent page against your organization and confirm the agent only sees what you see.
Contact the team