Remote MCP server

Connect Xerg to any MCP-ready client.

Xerg’s hosted MCP server gives remote clients direct access to audit history, waste trends, ranked recommendations, and source summaries without requiring a local CLI install. It requires an active Pro workspace or Enterprise plan plus a workspace API key. Local audits stay free and need no account. Start with npx @xerg/cli@latest init or the agent skill, then add hosted MCP when you want shared history.

Production endpoint

https://mcp.xerg.ai/mcp

Auth

Auth is API-key first. Clients should send a Xerg workspace API key as a Bearer token on every MCP request. Hosted MCP access is included with Pro and Enterprise workspaces.

Authorization: Bearer <XERG_API_KEY>

Need a key? Create one in dashboard settings. Free workspaces include API keys for pushes; hosted MCP itself requires Pro or Enterprise.

Transport

Streamable HTTP is the supported transport. The MCP endpoint accepts stateless requests at /mcp.

https://mcp.xerg.ai/mcp

Supported Clients

Cursor remote MCP
Claude Code
Codex
Claude Desktop via mcp-remote
Cloudflare AI Playground
Any MCP client that can send an Authorization header

Client config shapes differ. Cursor and Claude Code usually use an mcpServers.xerg JSON block; Codex uses a TOML block in ~/.codex/config.toml.

Cursor / Claude Code

{
  "mcpServers": {
    "xerg": {
      "type": "http",
      "url": "https://mcp.xerg.ai/mcp",
      "headers": {
        "Authorization": "Bearer <XERG_API_KEY>"
      }
    }
  }
}

Codex

[mcp_servers.xerg]
enabled = true
url = "https://mcp.xerg.ai/mcp"

[mcp_servers.xerg.http_headers]
Authorization = "Bearer <XERG_API_KEY>"

Read Tools

xerg_latest_audit
xerg_history
xerg_trends
xerg_sources
xerg_recommendations
xerg_list_policies

Write Tools

xerg_push_audit
xerg_ingest_raw_openclaw
xerg_upsert_policy
xerg_delete_policy
xerg_create_policy_from_recommendation

Known Limitations

Authentication is via Bearer API key. OAuth is not supported.
Write tools ask you to preview a change before committing it.
Streamable HTTP at /mcp is the supported transport. SSE is not exposed.
MCP clients that can only authenticate over OAuth cannot connect.