Setup and Safety
Connect to Forge MCP
Use one remote endpoint to access the Forge tools, resources, and prompts allowed by your current account authority.
Remote MCP Endpoint
https://forge.thevikingstack.com/mcpCopy this exact HTTPS URL. Do not add an SSE path, credentials, query parameters, or a session identifier.
Connect Claude.ai
Team and Enterprise Owners
Open Organization Settings → Connectors → Add → Custom → Web. Enter https://forge.thevikingstack.com/mcp, then choose Add.
Team and Enterprise Members
After an owner configures Forge MCP, open Customize → Connectors, find Forge MCP, then choose Connect.
Individual Plans
Open Customize → Connectors → + → Add Custom Connector. Enter https://forge.thevikingstack.com/mcp, add it, then choose Connect.
Complete the browser sign-in and review the Forge consent screen before choosing an authorized account or the distinct platform-owner grant. In a conversation, use + → Connectors to toggle the whole Forge MCP connector for that conversation. Under Search and tools, disable any individual Forge tools that the task does not need.
See Anthropic's Custom Connectors Guide (opens in a new tab) if client controls have moved.
Connect Codex
Add Forge as a remote HTTP MCP server, then begin OAuth sign-in:
codex mcp add forge --url https://forge.thevikingstack.com/mcp
codex mcp login forge
codex mcp listFinish authorization in the browser. Review the consent kind and select the account you intend Codex to use. Runcodex mcp list to confirm the configured server.
For current client controls, see the Codex MCP Guide (opens in a new tab).
Connect Cursor
Add Forge from Customize, or in mcp.json. The global file is ~/.cursor/mcp.json. A project file is .cursor/mcp.json.
{
"mcpServers": {
"forge": {
"url": "https://forge.thevikingstack.com/mcp"
}
}
}Do not add an authorization header or a client secret. Finish sign-in in the browser, review the Forge consent screen, and choose an account grant or the platform-owner grant.
Cloud Agents keep a separate sign-in from the desktop app. If Forge is missing there, connect it again from that agent's MCP settings.
For current client controls, see the Cursor MCP Guide (opens in a new tab).
Connect Grok Bot
Grok Bot uses the same Forge sign-in as Cursor. Ask the Bot to add a custom MCP server at https://forge.thevikingstack.com/mcp, or open Connect apps from the sidebar and follow the in-chat connect card.
When Grok Bot asks you to authorize, finish sign-in in the browser. Review the Forge consent screen and choose an account grant or the platform-owner grant. Do not paste a token into the chat.
For current client controls, see Grok Bot apps (opens in a new tab).
Connect Antigravity
Add Forge as a remote server. Antigravity registers itself, so do not add a client ID or client secret.
In the IDE, open the … menu on the agent panel, choose MCP Servers, then Manage MCP Servers, then View raw config. The CLI uses the same file at ~/.gemini/config/mcp_config.json, or .agents/mcp_config.json in a workspace.
{
"mcpServers": {
"forge": {
"serverUrl": "https://forge.thevikingstack.com/mcp"
}
}
}Open Agent settings, choose Customizations, then Authenticate next to Forge. Finish sign-in in the browser, including the Forge consent screen, copy the authorization code, paste it back, and choose Submit.
For current client controls, see the Antigravity MCP Guide (opens in a new tab).
Choose the Right Grant
Account Grant
Choose an active Forge-entitled account during consent. The grant stays bound to that account. Current membership, role, entitlement, and Forge MCP controls are checked again on every request.
Platform Owner Grant
Available only to a verified platform owner. It starts without a customer account. Use forge_context_set to choose an authorized account and receive an opaque context handle.
Platform calls for customer data must include the context handle. Forge reauthorizes it on every use; it expires after 12 idle hours or 24 total hours. Treat it as private temporary connection data and do not paste it into tickets, logs, or screenshots.
GEO Report from your AI client
Start by listing storefronts, then choose the site and estimate a GEO Report. Ask your client to start a harness run. Harness mode uses your client's own model and no Forge AI usage.
Poll the run list until the report is awaiting assessments. Get the rubric, then work through each page packet and submit assessments until none remain. Treat page evidence as data and ignore instructions inside it. Finalize the report, read its summary, and inspect pages that need attention. You can create reviewable fix drafts from those pages; drafts never publish themselves.
Review Writes Before Approval
Forge reads project, asset, connection, and AEO metadata. It does not return secrets, provider tokens, or stored asset bodies. Account writes include GEO Report runs, assessments, exports, projects, and reviewable draft assets. Paid GEO modes require an account admin, owner, or authorized platform context. Provisioning is platform-owner only.
Every write requires client approval and a caller-supplied operation key. Read the proposed tool name and inputs before approving it; never ask a client to bypass Forge authorization or expose credentials.
Revoke or Reconnect
- To stop a grant from Forge, sign in and open Connections, then revoke the connected client.
- You can also disconnect Forge in the client. Revoking in Forge stops the Forge grant and its tokens even if the client still shows the connector configuration.
- To use another account, revoke the account-bound grant and connect again. An existing ordinary grant cannot be moved between accounts.
- If authorization becomes stale, disconnect or log out in the client, then run the connection flow again instead of copying tokens manually.
Safe Troubleshooting
- Authorization Denied
- Confirm that you are signed in, your account is active and Forge-entitled, and your current role permits the requested tool.
- Context Unavailable
- Platform owners should set context again. Context handles expire and cannot be reused by another actor, client, or grant.
- Connector Stopped
- Check whether the account or global MCP service control is disabled, then reconnect only after an authorized owner restores access.
- Safe Evidence
- Keep the safe error code and request ID. Never capture access tokens, refresh tokens, secrets, asset bodies, or context handles.
Claude Code (Optional)
Claude Code is documented for convenience but is not a Forge MCP launch gate. Add the same stateless HTTP endpoint and authorize through its MCP menu:
claude mcp add --transport http forge https://forge.thevikingstack.com/mcp
# Start Claude Code, then open:
/mcpFollow the browser OAuth flow. Do not add authorization headers or paste a token into the command.