Skip to content

docs: remote access — other apps, phone, Fleet setup #229

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
joedanz merged 1 commit into from
Oct 6, 2026
Merged

docs: remote access — other apps, phone, Fleet setup #229

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 36 additions & 2 deletions docs/guides/remote-access.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,22 +58,56 @@ brainkit does not run the sign-in. An identity edge in front of it does, and bra
</Steps>

<Callout type="info">
If the sign-in page says **Invalid nonce**, it just waited too long. Click **Connect**
again.
If the sign-in page says **Invalid nonce**, the **Allow** page waited too long. Click
**Connect** again and click **Allow** straight away.
</Callout>

On the Claude phone app the connector appears by itself once it has been added on the web.
Open it, tap **Connect**, and sign in the same way.

<Callout type="info">
Claude remembers a connector's tool list from when it was first connected. If you
connected before saving notes was available, **Disconnect** and **Connect** the connector
once and `brain_capture` will appear.
</Callout>

## Connect other apps

Any app that supports remote MCP servers with sign-in can use the same address. Claude on the
web and phone is the one we have tested end to end. The others follow each app's own
documentation, and their menus change, so treat these as the shape of the steps.

| App | How to add it |
|---|---|
| **Claude Code** | `claude mcp add --transport http brain <address>`, then `/mcp` → **brain** → **Authenticate**. |
| **Cursor** | Add `{"mcpServers": {"brain": {"url": "<address>"}}}` to `~/.cursor/mcp.json`, then click **Needs login**. |
| **VS Code** | In `.vscode/mcp.json`: `{"servers": {"brain": {"type": "http", "url": "<address>"}}}`, then **Start**. |
| **ChatGPT** | Turn on developer mode under **Settings → Connectors → Advanced** (plan-dependent), add a connector with the address and choose OAuth. |

Every app opens the same sign-in page. Apps that need a fixed client ID instead of
registering themselves are not supported by the setup above.

If the brain files are on the same computer as the app, `brain mcp` over stdio needs no
address and no sign-in (see [`brain mcp`](/reference/cli#brain-mcp)). It has the six read
tools only; saving notes needs the remote address.

## What Claude can do

The same six read tools as `brain mcp` (`brain_search`, `brain_read`, `brain_links`,
`brain_graph`, `brain_recent`, `brain_facts`), plus **`brain_capture`**, which saves a note
into your Inbox. Claude cannot edit or delete existing notes this way.

## With Fleet

[Fleet](/guides/reference-deployment) does every step in "Set it up by hand" for you. On a
company's page, **Remote MCP → Set up** creates the tunnel, the Cloudflare Access application
and its policies, the per-person services, the route table and the cron change, then checks
each service's health. Running it again changes nothing that is already right. When someone
joins or leaves, Fleet updates the allowed emails, the route table and that person's service
in the same pass. **Disable** removes it all again.

The address is `https://mcp-<company>.<your domain>/mcp`.

## Set it up by hand

If you run brainkit without Fleet, here is every piece. You need a Cloudflare account with
Expand Down
Loading