# MCP with OAuth

Connect a compatible client directly, without a marketplace plugin.

Source: https://littleworks.app/docs/mcp-connection

## Connection details

### Server URL

```plaintext
https://littleworks.app/mcp
```

| Setting | Value |
| --- | --- |
| Transport | Streamable HTTP |
| Authentication | OAuth authorization code with S256 PKCE |
| Suggested name | littleworks |
| Client registration | Automatic / dynamic |
| Scope | store:manage |
| Store | Selected during OAuth approval |

Use your client’s OAuth flow. No API key or client secret is needed. After authorization starts, enter your store’s myshopify.com domain, sign in to Shopify, and approve the connection. The address is shared; your token limits access to the approved store.

## Claude

Open [Claude connectors](https://claude.ai/customize/connectors), add a custom connector named Littleworks, and paste the server URL. Keep automatic registration and the detected OAuth settings, then connect and approve in Shopify. Enable Littleworks for your conversation if needed. See [Claude’s current availability and instructions](https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp).

## Codex

### Add and authorize

```bash
codex mcp add littleworks --url https://littleworks.app/mcp
codex mcp login littleworks
```

Check existing connections first and preserve them. These commands configure local Codex; they do not install a ChatGPT web plugin. Start a new session if your client requires it.

## ChatGPT

Where your account and workspace permit custom MCP connections, enable developer mode and add the remote server using OAuth. This setup is separate from local Codex configuration. See [OpenAI’s developer-mode instructions](https://developers.openai.com/api/docs/guides/developer-mode) for current eligibility and controls.

## Cursor

[Add Littleworks to Cursor](https://cursor.com/install-mcp?name=littleworks&config=eyJ1cmwiOiJodHRwczovL2xpdHRsZXdvcmtzLmFwcC9tY3AifQ%3D%3D), confirm the installation, then complete OAuth. Alternatively, add the URL in Cursor’s MCP settings. See [Cursor’s connection documentation](https://cursor.com/docs/mcp).

## Other MCP clients

Add the same URL as a remote Streamable HTTP server and use OAuth. Discovery starts at `/.well-known/oauth-protected-resource/mcp`; authorization metadata is at `/.well-known/oauth-authorization-server`. Clients must support dynamic registration, S256 PKCE, and resource-bound tokens. URL-based client metadata documents are not currently supported.

## Connection lifecycle

Access tokens last one hour. Refresh tokens rotate, and grants expire after 90 days. Let your client manage them. Disconnecting from Littleworks invalidates the connection immediately. Existing store-specific connections remain supported; use the shared URL for new connections.