Skip to content

MCP Connection

The MCP Connection type (external_tool internally) is NeuBird’s generic connector for any vendor that exposes a remote MCP server over HTTP. Use it for a tool that doesn’t have its own dedicated NeuBird connection type — point it at the vendor’s MCP endpoint and NeuBird calls that server’s tools directly during investigations.

NeuBird validates the connection by listing the target server’s tools. It tries <endpoint>/mcp first, then the bare endpoint, and keeps whichever one responds.

There are three ways to authenticate, shown as tabs on the connection form.

Use this when the vendor issues a static bearer token.

FieldRequiredDescription
NameYesA descriptive name for this connection
DescriptionNoAn overview of what this connection is used for
Endpoint URLYesThe vendor’s MCP server URL
Access TokenNoA bearer token for the MCP server, if it requires one

Use this when the vendor’s MCP server supports OAuth. Enter the Endpoint, then click through the authorization flow.

  1. NeuBird discovers the server’s OAuth metadata (authorization, token, and registration endpoints) from the endpoint you provide.
  2. If you don’t supply a Client ID, NeuBird attempts Dynamic Client Registration (DCR) against the discovered registration endpoint to obtain one automatically.
  3. You are redirected to the vendor to authorize access, then redirected back. NeuBird exchanges the authorization code for tokens and stores them, refreshing automatically as needed.
FieldRequiredDescription
EndpointYesThe vendor’s MCP server URL
Client IDNoOnly needed if the auth server does not support Dynamic Client Registration
Client SecretNoPaired with Client ID, if the auth server requires a confidential client

Note

If the auth server supports DCR, leave Client ID and Client Secret blank — NeuBird registers a client automatically during the flow.

Use this when the MCP server is only reachable from inside your network. Same fields as Direct Access, plus the standard Teleport Application fields (Teleport Proxy URL, Bot Join Token, Teleport App Name).

FieldRequiredDescription
NameYesA descriptive name for this connection
DescriptionNoAn overview of what this connection is used for
Endpoint URLYesThe vendor’s MCP server URL
Access TokenNoA bearer token for the MCP server (Direct Access / Teleport Application)
Teleport Proxy URLYes for Teleport ApplicationThe Teleport proxy server URL, e.g. teleport.example.com:443
Bot Join TokenYes for Teleport ApplicationMachine ID bot token for tbot
Teleport App NameYes for Teleport ApplicationMust match the Teleport application name for this service

For general instructions on creating and managing connections, see the Connections Overview.