English Français العربية

Working Machines MCP Server

Official registry Other

Connect to 1,400+ apps and 15,000+ actions through one OAuth-protected MCP server.

Source code Website Documentation

What can you do with Working Machines MCP Server?

  • Intent-Based Access: Agents discover only the minimal actions required for the task at hand rather than loading full provider schemas.
  • Provider-Native Scopes: Connect accounts once with provider-bound permissions (e.g. create issues only).
  • Execution Policies: Allow, reject, or require approval for actions before any call leaves the execution boundary.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http working-machines-mcp-server 'https://app.workingmachines.dev/mcp' --header 'Authorization: <Your Working Machines OAuth bearer token. Format: '\''Bearer <token>'\''>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "working-machines-mcp-server": {
            "type": "http",
            "url": "https://app.workingmachines.dev/mcp",
            "headers": {
                "Authorization": "<Your Working Machines OAuth bearer token. Format: 'Bearer <token>'>"
            }
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Working Machines MCP Server for Cursor
  2. Remote Access to 1,400+ Apps & 15,000+ Tools
  3. Safety & Security Architecture
  4. Repository Structure
  5. Agent Workflow
  6. Validation
  7. Documentation & Links
  8. License & Notice

Working Machines MCP Server for Cursor

Official Cursor plugin repository for Working Machines.

Connect Cursor to 1,400+ apps and 15,000+ machine-ready tools remotely through one secure, hosted Model Context Protocol (MCP) server.

Remote Access to 1,400+ Apps & 15,000+ Tools

Working Machines provides the application layer for AI agents. Through a single remote MCP connection (https://app.workingmachines.dev/mcp), your agent gets instant access to 1,400+ integrations and 15,000+ structured actions across:

  • Team Collaboration: Slack, Gmail, Google Workspace, Microsoft Teams, Notion
  • Development & Cloud: GitHub, GitLab, Sentry, Jira, AWS, Vercel, Datadog
  • Projects & Productivity: Linear, Asana, Trello, ClickUp, Monday.com
  • Commerce & CRM: Salesforce, HubSpot, Stripe, Shopify, Zendesk
  • Data & Analytics: Snowflake, BigQuery, PostgreSQL, Airtable, Pinecone

Safety & Security Architecture

Working Machines is engineered from the ground up for safe, enterprise-grade AI execution:

🛡️ 1. Your Credentials Are Not Context
  • Zero Local Secret Storage: API keys, OAuth tokens, and secret credentials stay behind the Working Machines execution boundary.
  • Context Protection: Credentials never enter your Cursor chat context, prompt buffers, or local workspace files.
🔒 2. Scoped Capabilities & Policy Enforcement
  • Intent-Based Access: Agents discover only the minimal actions required for the task at hand rather than loading full provider schemas.
  • Provider-Native Scopes: Connect accounts once with provider-bound permissions (e.g. create issues only).
  • Execution Policies: Allow, reject, or require approval for actions before any call leaves the execution boundary.
📋 3. Verifiable & Auditable Run History
  • Structured Proof: Every action execution produces a structured, redacted, and auditable record.
  • Execution Visibility: Tracks who acted, which connection was used, what changed, timing, and policy decisions for complete transparency.

Repository Structure

This repository follows the official Cursor plugin marketplace format:

working-machines/
├── .cursor-plugin/
│   └── marketplace.json
├── plugins/
│   └── working-machines/
│       ├── .cursor-plugin/
│       │   └── plugin.json
│       ├── assets/
│       │   └── logo.png
│       ├── skills/
│       │   └── working-machines/
│       │       └── SKILL.md
│       ├── mcp.json
│       └── README.md
├── scripts/
│   └── validate-template.mjs
├── README.md
├── CHANGELOG.md
├── LICENSE
├── NOTICE
└── .gitignore

Agent Workflow

Cursor agents follow the Working Machines discovery and execution sequence:

list_apps
      ↓
list_connections
      ↓
search_actions
      ↓
get_action_guide
      ↓
execute_action
      ↓
verify result
  1. list_apps: Discover available applications and tool integrations.
  2. list_connections: Verify active account authorizations and permissions.
  3. search_actions: Find machine actions by intent.
  4. get_action_guide: Retrieve validated schemas and input parameters.
  5. execute_action: Execute the action securely behind the boundary.
  6. Verify Result: Audit the structured execution response.

Validation

Verify repository manifest and component compliance:

node scripts/validate-template.mjs

License & Notice

  • Open-source plugin wrapper licensed under the MIT License.
  • See the NOTICE file regarding proprietary hosted infrastructure details.

Frequently asked questions

What is Working Machines MCP Server?

Connect to 1,400+ apps and 15,000+ actions through one OAuth-protected MCP server.

How do I install Working Machines MCP Server?

It runs as a remote server. In Claude Code: claude mcp add --transport http working-machines-mcp-server 'https://app.workingmachines.dev/mcp' --header 'Authorization: <Your Working Machines OAuth bearer token. Format: '\''Bearer <token>'\''>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Working Machines MCP Server need an API key?

Yes. It expects Authorization, which you set in its configuration.

Is Working Machines MCP Server open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Working Machines MCP Server?

It is published by klei30. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.