Your connection address
Use the address shown on your FluxDesk connection card. The main entry is https://my.fluxdesk.net/mcp. If a Project supplies another endpoint, use that endpoint.
Transport: Streamable HTTP. OAuth uses PKCE and automatic client registration. Permission choices are Can view only, Can create and Can act for me. Available choices depend on your Project permissions.
High-impact decisions remain yours. A connection cannot grant itself access or reach a Project you cannot access.
Verify access before writing
Ask your client to call fluxdesk_help, then whoami and ping. A saved configuration alone proves no tool call. Help lists every registered tool eligible for this key, grouped by object; object permissions are checked again when you call a tool.
After whoami and ping, mcp_smoke_test reports canCall and missingScopes without creating tasks, feedback, or monitoring routes. Use it for read-only diagnostics before enabling writes.
Read input schemas with tools/list. Examples contain synthetic placeholders and execute nothing. Use dry-run previews and idempotency keys where the tool offers them. New business writes must support both; existing tools are still being brought into line.
Missing scope: reconnect with the needed level. Expired or revoked: reconnect. Suspended: contact your administrator. Missing or inaccessible object: check the Project and reference; do not guess other IDs.
OAuth currently advertises read and write, returns expanded internal scopes, and has no refresh token or expires_in. Connection expiry is still enforced. General quota numbers are pending an enforced admission contract. External clients can poll eligible inbox tools; general Project event subscriptions and replay are not yet offered.
AI connection guide (/agents.md) · Full MCP protocol guide