Skip to main content
Glama
pipeshub-ai

PipesHub MCP Server

Official

将 MCP 客户端连接到 PipesHub MCP 服务器

本指南介绍如何使用静态 OAuth 凭据或 Bearer 令牌,将 PipesHub 的远程 MCP 服务器连接到 Cursor、Claude Code、Gemini CLI、Codex CLI、Claude.ai(网页版) 和 LibreChat。

PipesHub 通过 Streamable HTTP 在 /mcp 端点暴露远程 MCP 服务。MCP 客户端直接连接到此端点——无需本地 npm 包或 stdio 进程。

正在使用编码代理? 请从面向编码代理开始。使用 npx skills add pipeshub-ai/mcp-server 将技能安装到用户的仓库中(参见 skills/pipeshub)。在本仓库中工作的贡献者:请阅读 AGENTS.md。

正在查找工具参考? 请参阅 TOOLS.md,了解 MCP 服务器暴露的每个工具(pipeshub_chat、pipeshub_search、pipeshub_get_record_content、pipeshub_download_record、pipeshub_directory、pipeshub_sources、pipeshub_agents)的描述、参数和决策指南。

正在使用 QM? QM 无法挂载第三方 MCP 端点——它是其自身框架的 MCP 服务器,而非客户端。请按照将 PipesHub 与 QM 结合使用操作。qm/ 中的部署层捆绑包为代理在其沙箱内提供了 pipeshub 命令;此包将该命令作为第二个 bin 发布。

前置条件

  • 一个正在运行的 PipesHub 实例(自托管或云端)

  • 在 PipesHub 中创建的 OAuth 应用(参见步骤 1)

Related MCP server: AnythingLLM MCP Server

步骤 1:在 PipesHub 中创建 OAuth 应用

  1. 以管理员身份登录你的 PipesHub 实例

  2. 导航到 设置 > 开发者设置 > OAuth 应用

  3. 点击 创建 OAuth 应用

  4. 填写应用详情:

    • 名称:例如 MCP Integration

    • 重定向 URI:添加你计划使用的所有客户端的重定向 URI:

      客户端

      重定向 URI

      Cursor

      cursor://anysphere.cursor-mcp/oauth/callback

      Claude Code

      http://localhost:<PORT>/callback(例如 http://localhost:8080/callback)

      Claude.ai(网页版)

      https://claude.ai/api/mcp/auth_callback

      Gemini CLI

      http://localhost:7777/oauth/callback

      LibreChat

      http://localhost:3080/api/mcp/<server-identifier>/oauth/callback

重要提示:MCP_SCOPES 中的作用域必须与你授予 OAuth 应用的作用域匹配——不匹配将导致授权错误。

  1. 保存应用并复制 客户端 ID 和 客户端密钥

自定义默认作用域

默认情况下,PipesHub 在其 /.well-known/oauth-protected-resource/mcp 发现端点中暴露一些默认作用域。你可以通过在你的 PipesHub 实例上设置 MCP_SCOPES 环境变量来自定义暴露哪些作用域。这对于像 Claude Code 这样会自动请求所有暴露作用域的客户端非常有用。

占位符

在以下所有配置中替换这些内容:

占位符

描述

示例

PIPESHUB_INSTANCE_URL

你的 PipesHub 实例 URL

https://app.pipeshub.com

YOUR_CLIENT_ID

OAuth 应用客户端 ID

clid_abc123...

YOUR_CLIENT_SECRET

OAuth 应用客户端密钥

clsec_xyz789...

远程 MCP 端点 URL 为:PIPESHUB_INSTANCE_URL/mcp


远程 MCP 设置

Cursor 通过 mcp.json 中的 auth 对象支持远程 MCP 服务器的静态 OAuth。

配置

打开 Cursor 设置 > 工具与集成 > 新建 MCP 服务器,或编辑你项目的 .cursor/mcp.json:

{
  "mcpServers": {
    "pipeshub": {
      "url": "PIPESHUB_INSTANCE_URL/mcp",
      "auth": {
        "CLIENT_ID": "YOUR_CLIENT_ID",
        "CLIENT_SECRET": "YOUR_CLIENT_SECRET",
        "scopes": [
          "org:read", "org:write", "org:admin",
          "user:read", "user:write", "user:invite", "user:delete",
          "usergroup:read", "usergroup:write",
          "team:read", "team:write",
          "kb:read", "kb:write", "kb:delete", "kb:upload",
          "semantic:read", "semantic:write", "semantic:delete",
          "conversation:read", "conversation:write", "conversation:chat",
          "agent:read", "agent:write", "agent:execute",
          "connector:read", "connector:write", "connector:sync", "connector:delete",
          "config:read", "config:write",
          "document:read", "document:write", "document:delete",
          "crawl:read", "crawl:write", "crawl:delete"
        ]
      }
    }
  }
}

Cursor 将通过 PipesHub 的 /.well-known/oauth-protected-resource/mcp 元数据自动发现授权端点和令牌端点。

注意: 如果省略 scopes 字段,Cursor 会获取 /.well-known/oauth-protected-resource/mcp 并请求其中列出的所有 scopes_supported。要限制访问范围,请仅显式列出你需要的范围。你还可以在服务端控制暴露哪些作用域——参见自定义默认作用域。

使用环境变量

使用 Cursor 的 ${env:VAR} 插值将密钥保留在配置文件之外:

{
  "mcpServers": {
    "pipeshub": {
      "url": "${env:PIPESHUB_INSTANCE_URL}/mcp",
      "auth": {
        "CLIENT_ID": "${env:PIPESHUB_CLIENT_ID}",
        "CLIENT_SECRET": "${env:PIPESHUB_CLIENT_SECRET}",
        "scopes": [
          "kb:read", "kb:write",
          "semantic:read", "semantic:write",
          "conversation:read", "conversation:write", "conversation:chat",
          "agent:read", "agent:write", "agent:execute",
          "connector:read", "connector:write",
          "config:read", "user:read"
        ]
      }
    }
  }
}

重定向 URI

Cursor 对所有 MCP 服务器使用固定的重定向 URI:

cursor://anysphere.cursor-mcp/oauth/callback

在 PipesHub 中创建 OAuth 应用时,将此注册为允许的重定向 URI。

OAuth 登录故障排除

如果 Cursor 的内部浏览器无法加载 OAuth 登录页面,请从内部浏览器复制授权 URL,粘贴到你的常规浏览器中完成登录流程。

Claude Code 通过 --client-id、--client-secret 和 --callback-port 支持带有静态 OAuth 凭据的远程 HTTP MCP 服务器。

PipesHub 在 /.well-known/oauth-protected-resource/mcp 暴露发现端点,因此 Claude Code 会自动发现授权端点和令牌端点。

重要提示: Claude Code 不支持配置特定作用域。它会获取 /.well-known/oauth-protected-resource/mcp,读取 scopes_supported 列表,并请求所有作用域。你在 PipesHub 中的 OAuth 应用必须有权访问发现端点中列出的所有作用域,否则授权请求将失败。要限制暴露的作用域,请参见自定义默认作用域。

使用 CLI 添加

claude mcp add --transport http \
  --client-id YOUR_CLIENT_ID \
  --client-secret \
  --callback-port 8080 \
  pipeshub PIPESHUB_INSTANCE_URL/mcp

不带值的 --client-secret 会提示输入掩码。要跳过提示,请设置 MCP_CLIENT_SECRET 环境变量:

MCP_CLIENT_SECRET=YOUR_CLIENT_SECRET claude mcp add --transport http \
  --client-id YOUR_CLIENT_ID \
  --client-secret \
  --callback-port 8080 \
  pipeshub PIPESHUB_INSTANCE_URL/mcp

要使其在所有项目中可用:

claude mcp add --transport http --scope user \
  --client-id YOUR_CLIENT_ID \
  --client-secret \
  --callback-port 8080 \
  pipeshub PIPESHUB_INSTANCE_URL/mcp

使用 JSON 添加

claude mcp add-json pipeshub '{
  "type": "http",
  "url": "PIPESHUB_INSTANCE_URL/mcp",
  "oauth": {
    "clientId": "YOUR_CLIENT_ID",
    "callbackPort": 8080
  }
}' --client-secret

项目级作用域(.mcp.json)

在项目根目录创建 .mcp.json 文件。此文件可以提交到版本控制(密钥通过环境变量保持在外):

{
  "mcpServers": {
    "pipeshub": {
      "type": "http",
      "url": "${PIPESHUB_INSTANCE_URL}/mcp",
      "oauth": {
        "clientId": "${PIPESHUB_CLIENT_ID}",
        "callbackPort": 8080
      }
    }
  }
}

在启动 Claude Code 之前设置环境变量:

export PIPESHUB_INSTANCE_URL="https://app.pipeshub.com"
export PIPESHUB_CLIENT_ID="your-client-id"

注意: 客户端密钥存储在系统钥匙串中,而非配置文件中。首次通过 /mcp 进行身份验证时,系统会提示你输入。

身份验证

添加服务器后,在 Claude Code 中运行 /mcp 并按照浏览器登录流程操作。令牌会安全存储并自动刷新。

验证

claude mcp list
claude mcp get pipeshub

Gemini CLI 通过 dynamic_discovery(默认)支持带有 OAuth 的远程 MCP 服务器,该模式会从 PipesHub 的 /.well-known/oauth-protected-resource/mcp 自动发现授权端点和令牌端点。

选项 A:设置文件

编辑 ~/.gemini/settings.json:

{
  "mcpServers": {
    "pipeshub": {
      "url": "PIPESHUB_INSTANCE_URL/mcp",
      "oauth": {
        "clientId": "YOUR_CLIENT_ID",
        "clientSecret": "YOUR_CLIENT_SECRET",
        "scopes": [
          "org:read", "org:write", "org:admin",
          "user:read", "user:write", "user:invite", "user:delete",
          "usergroup:read", "usergroup:write",
          "team:read", "team:write",
          "kb:read", "kb:write", "kb:delete", "kb:upload",
          "semantic:read", "semantic:write", "semantic:delete",
          "conversation:read", "conversation:write", "conversation:chat",
          "agent:read", "agent:write", "agent:execute",
          "connector:read", "connector:write", "connector:sync", "connector:delete",
          "config:read", "config:write",
          "document:read", "document:write", "document:delete",
          "crawl:read", "crawl:write", "crawl:delete"
        ]
      }
    }
  }
}

注意: 调整 scopes 列表以匹配你的 OAuth 应用被授予的作用域。如果你只需要一部分工具,可以相应地限制作用域。

选项 B:CLI 命令

gemini mcp add --transport http pipeshub PIPESHUB_INSTANCE_URL/mcp

然后编辑 ~/.gemini/settings.json,按上述方式添加 oauth 块。

身份验证

在 Gemini CLI 内部,使用 /mcp auth 命令:

# List servers and their auth status
/mcp auth

# Authenticate with PipesHub (opens browser for login)
/mcp auth pipeshub

# Re-authenticate if tokens expire
/mcp auth pipeshub

首次连接时,Gemini 会自动检测 401 响应、发现 OAuth 端点并打开浏览器进行登录。令牌安全存储在 ~/.gemini/mcp-oauth-tokens.json 中并自动刷新。

管理服务器

# List all configured servers
gemini mcp list

# Remove the server
gemini mcp remove pipeshub

# Temporarily disable/enable
gemini mcp disable pipeshub
gemini mcp enable pipeshub

OAuth 配置属性

属性

必需

描述

clientId

是

来自 PipesHub 的 OAuth 2.0 客户端 ID

clientSecret

否

OAuth 2.0 客户端密钥(用于机密客户端)

scopes

否

要请求的 OAuth 作用域

authorizationUrl

否

覆盖授权端点(默认自动发现)

tokenUrl

否

覆盖令牌端点(默认自动发现)

redirectUri

否

覆盖重定向 URI(默认为 http://localhost:7777/oauth/callback)

注意: OAuth 需要本地浏览器。在无头环境、没有 X11 转发的远程 SSH 或没有浏览器访问权限的容器中无法工作。

Codex CLI(OpenAI Codex)通过 Streamable HTTP 连接远程 MCP 服务器,在 ~/.codex/config.toml(或项目根目录下的 .codex/config.toml 以限定项目范围)中配置 [mcp_servers.<name>] 表。Codex 的 HTTP 传输使用从环境变量读取的 bearer 令牌 进行身份验证,因此请传入 PipesHub JWT bearer 令牌。

[mcp_servers.pipeshub]
url = "PIPESHUB_INSTANCE_URL/mcp"
bearer_token_env_var = "PIPESHUB_BEARER_TOKEN"

bearer_token_env_var 是保存令牌的环境变量的名称——在启动 Codex 之前导出它:

export PIPESHUB_BEARER_TOKEN="YOUR_BEARER_TOKEN"

令牌是原始 JWT,不带 Bearer 关键字。

或者使用 CLI 添加:

codex mcp add pipeshub \
  --url PIPESHUB_INSTANCE_URL/mcp \
  --bearer-token-env-var PIPESHUB_BEARER_TOKEN

--bearer-token-env-var 接受保存令牌的环境变量的名称,而非令牌值本身。

验证

# List configured MCP servers
codex mcp list

# Inside the Codex TUI, view server status and available tools
/mcp

Claude.ai 通过远程 MCP 服务器支持自定义连接器。这让你无需任何本地设置即可直接在 Claude.ai 网页界面中使用 PipesHub 工具。

注意: 此功能目前处于测试阶段。免费计划用户仅限于一个自定义连接器。

Claude.ai 连接器设置

Claude.ai 添加自定义连接器对话框

对于个人用户(Pro / Max 计划)

  1. 前往 claude.ai 并导航到 设置 > 连接器

  2. 点击连接器部分底部的 添加自定义连接器

  3. 输入 MCP 服务器 URL:

    PIPESHUB_INSTANCE_URL/mcp
  4. 点击 高级设置 并输入你的 OAuth 凭据:

    • OAuth 客户端 ID:YOUR_CLIENT_ID

    • OAuth 客户端密钥:YOUR_CLIENT_SECRET

  5. 点击 添加

  6. 你将被重定向到 PipesHub 的登录页面进行身份验证并授予权限

  7. 身份验证完成后,连接器将处于活动状态,PipesHub 工具将在你的 Claude.ai 对话中可用

对于团队 / 企业计划

组织所有者必须首先添加连接器:

  1. 导航到 组织设置 > 连接器

  2. 点击 添加自定义连接器

  3. 输入 MCP 服务器 URL:PIPESHUB_INSTANCE_URL/mcp

  4. 点击 高级设置 并输入 OAuth 客户端 ID 和客户端密钥

  5. 点击 添加

团队成员随后可以连接:

  1. 前往 设置 > 连接器

  2. 找到 PipesHub 连接器(标有"自定义"标签)

  3. 点击 连接 通过 PipesHub 的 OAuth 登录进行身份验证

重定向 URI

Claude.ai 使用以下重定向 URI 进行 OAuth:

https://claude.ai/api/mcp/auth_callback

在你的 PipesHub OAuth 应用中将其注册为允许的重定向 URI。

安全说明

  • 仅连接到受信任的 MCP 服务器

  • 在 OAuth 身份验证流程中审查请求的权限

  • Claude.ai 使用授予的 OAuth 令牌代表你与 PipesHub 交互——你的密码永远不会被共享

LibreChat 通过其自定义连接器 UI 支持带有 OAuth 身份验证的远程 MCP 服务器。这让你可以将 PipesHub 工具连接到 LibreChat 实例中可用的任何模型。

LibreChat MCP 配置

配置

将以下英文文本翻译成中文:

  1. 登录你的 LibreChat 实例

  2. 导航到 MCP 服务器 设置面板

  3. 点击 添加 创建新的自定义 MCP 连接器

  4. 填写连接器详细信息:

    • 名称:PipesHub(或你喜欢的任何名称)

    • MCP 服务器 URL:PIPESHUB_INSTANCE_URL/mcp

    • 传输方式:选择 Streamable HTTP

    • 认证方式:选择 OAuth

  5. 输入你的 OAuth 凭据:

    • 客户端 ID:YOUR_CLIENT_ID

    • 客户端密钥:YOUR_CLIENT_SECRET

    • 授权 URL:PIPESHUB_INSTANCE_URL/api/v1/oauth2/authorize

    • 令牌 URL:PIPESHUB_INSTANCE_URL/api/v1/oauth2/token

    • 作用域:openid email(或根据需要添加其他作用域)

  6. 勾选 我信任此应用程序

  7. 点击 添加 保存连接器

  8. 添加后,LibreChat 会生成一个 重定向 URI,显示在连接器设置面板中(复制按钮旁边)。其格式如下:

    http://localhost:3080/api/mcp/<server-identifier>/oauth/callback
  9. 复制重定向 URI,并在你的 PipesHub OAuth 应用中将其注册为允许的重定向 URI(参见第 1 步)

  10. 返回 LibreChat 连接器,点击 更新 启动 OAuth 流程——你将被重定向到 PipesHub 的登录页面进行身份验证并授予权限

重定向 URI

LibreChat 会在 连接器创建后 生成重定向 URI。其格式如下:

http://localhost:3080/api/mcp/<server-identifier>/oauth/callback

其中 <server-identifier> 是 LibreChat 分配的唯一标识符(显示在连接器设置顶部的"唯一服务器标识符"处)。你必须复制此 URI 并添加到 PipesHub OAuth 应用的允许重定向 URI 列表中,然后 才能进行身份验证。

注意: 如果你的 LibreChat 实例运行在不同的主机或端口上,URI 会相应变化(例如 https://chat.example.com/api/mcp/pipeshub/oauth/callback)。

作用域

LibreChat 允许你在 作用域 字段中指定 OAuth 作用域。使用空格分隔的列表:

openid email

要请求 PipesHub 特定的作用域,请将其添加到作用域字段中:

openid email org:read kb:read kb:write semantic:read conversation:read conversation:write conversation:chat agent:read agent:execute

注意: 你请求的作用域必须与 PipesHub 中授予 OAuth 应用的作用域一致。详见自定义默认作用域。


本地 MCP 服务器(Stdio)

如果你不想连接 PipesHub 的远程 MCP 端点,也可以使用 @pipeshub-ai/mcp npm 包将 MCP 服务器作为本地 stdio 进程运行。当你更倾向于本地设置,或需要在无法直接通过 HTTP 连接远程 MCP 端点的环境中工作时,这种方式非常有用。

前提条件

  • 已安装 Node.js 18+

  • PipesHub 实例 URL

  • 认证凭据:Bearer 令牌(JWT)或 OAuth 客户端 ID + 客户端密钥

占位符

在以下所有配置中替换这些占位符:

占位符

描述

示例

PIPESHUB_INSTANCE_URL

你的 PipesHub 实例 URL

https://app.pipeshub.com

YOUR_BEARER_TOKEN

用于认证的 JWT Bearer 令牌

eyJhbGci...

YOUR_CLIENT_ID

OAuth 应用客户端 ID

clid_abc123...

YOUR_CLIENT_SECRET

OAuth 应用客户端密钥

clsec_xyz789...

在 Claude Desktop 设置中配置(claude_desktop_config.json):

{
  "mcpServers": {
    "pipeshub": {
      "command": "npx",
      "args": [
        "@pipeshub-ai/mcp",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--bearer-auth",
        "YOUR_BEARER_TOKEN"
      ]
    }
  }
}

使用 OAuth 凭据:

{
  "mcpServers": {
    "pipeshub": {
      "command": "npx",
      "args": [
        "@pipeshub-ai/mcp",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--client-id",
        "YOUR_CLIENT_ID",
        "--client-secret",
        "YOUR_CLIENT_SECRET",
        "--token-url",
        "/api/v1/oauth2/token"
      ]
    }
  }
}

打开 Cursor 设置 > 工具与集成 > 新建 MCP 服务器,或编辑项目中的 .cursor/mcp.json:

{
  "mcpServers": {
    "pipeshub": {
      "command": "npx",
      "args": [
        "@pipeshub-ai/mcp",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--bearer-auth",
        "YOUR_BEARER_TOKEN"
      ]
    }
  }
}

使用 OAuth 凭据:

{
  "mcpServers": {
    "pipeshub": {
      "command": "npx",
      "args": [
        "@pipeshub-ai/mcp",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--client-id",
        "YOUR_CLIENT_ID",
        "--client-secret",
        "YOUR_CLIENT_SECRET",
        "--token-url",
        "/api/v1/oauth2/token"
      ]
    }
  }
}
claude mcp add pipeshub -- npx -y @pipeshub-ai/mcp start \
  --server-url PIPESHUB_INSTANCE_URL \
  --bearer-auth YOUR_BEARER_TOKEN

使用 OAuth 凭据:

claude mcp add pipeshub -- npx -y @pipeshub-ai/mcp start \
  --server-url PIPESHUB_INSTANCE_URL \
  --client-id YOUR_CLIENT_ID \
  --client-secret YOUR_CLIENT_SECRET \
  --token-url /api/v1/oauth2/token
gemini mcp add pipeshub -- npx -y @pipeshub-ai/mcp start \
  --server-url PIPESHUB_INSTANCE_URL \
  --bearer-auth YOUR_BEARER_TOKEN

使用 OAuth 凭据:

gemini mcp add pipeshub -- npx -y @pipeshub-ai/mcp start \
  --server-url PIPESHUB_INSTANCE_URL \
  --client-id YOUR_CLIENT_ID \
  --client-secret YOUR_CLIENT_SECRET \
  --token-url /api/v1/oauth2/token

将 MCP 服务器作为本地 stdio 进程运行,使用 OAuth 应用的客户端 ID 和客户端密钥进行认证(client_credentials 授权方式)。编辑 ~/.codex/config.toml(或项目根目录下的 .codex/config.toml):

[mcp_servers.pipeshub]
command = "npx"
args = [
  "-y",
  "@pipeshub-ai/mcp",
  "start",
  "--server-url",
  "PIPESHUB_INSTANCE_URL/api/v1",
  "--client-id",
  "YOUR_CLIENT_ID",
  "--client-secret",
  "YOUR_CLIENT_SECRET",
  "--token-url",
  "/api/v1/oauth2/token",
]

注意事项:

  • --server-url 必须包含 /api/v1。

  • --token-url /api/v1/oauth2/token 是必需的。

或者使用 JWT Bearer 令牌进行认证:

[mcp_servers.pipeshub]
command = "npx"
args = [
  "-y",
  "@pipeshub-ai/mcp",
  "start",
  "--server-url",
  "PIPESHUB_INSTANCE_URL/api/v1",
  "--bearer-auth",
  "YOUR_BEARER_TOKEN",
]

打开命令面板 > MCP: 打开用户配置,然后添加:

{
  "mcpServers": {
    "pipeshub": {
      "command": "npx",
      "args": [
        "@pipeshub-ai/mcp",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--bearer-auth",
        "YOUR_BEARER_TOKEN"
      ]
    }
  }
}

打开 Windsurf 设置 > Cascade > 管理 MCP > 查看原始配置,然后添加:

{
  "mcpServers": {
    "pipeshub": {
      "command": "npx",
      "args": [
        "@pipeshub-ai/mcp",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--bearer-auth",
        "YOUR_BEARER_TOKEN"
      ]
    }
  }
}

要从克隆的仓库而不是 npm 包运行本地 MCP 服务器:

git clone https://github.com/pipeshub-ai/pipeshub-ai.git
cd pipeshub-ai
npm install
npm run build
node ./bin/mcp-server.js start --server-url PIPESHUB_INSTANCE_URL --bearer-auth YOUR_BEARER_TOKEN

对于 MCP 客户端配置,将 npx @pipeshub-ai/mcp 替换为 node ./bin/mcp-server.js:

{
  "mcpServers": {
    "pipeshub": {
      "command": "node",
      "args": [
        "./bin/mcp-server.js",
        "start",
        "--server-url",
        "PIPESHUB_INSTANCE_URL",
        "--bearer-auth",
        "YOUR_BEARER_TOKEN"
      ]
    }
  }
}

使用 MCP Inspector 进行调试:

npx @modelcontextprotocol/inspector node ./bin/mcp-server.js start --server-url PIPESHUB_INSTANCE_URL --bearer-auth YOUR_BEARER_TOKEN

CLI 帮助

查看完整的服务器参数列表:

npx @pipeshub-ai/mcp --help

工作原理

架构

AI Client (Cursor / Claude Code / Gemini CLI / Codex CLI / Claude.ai / LibreChat)
        │
        │  HTTP POST (JSON-RPC)
        │  Authorization: Bearer <token>
        ▼
  PIPESHUB_INSTANCE_URL/mcp
        │
        │  StreamableHTTP Transport
        │  (stateless, per-request MCP server)
        ▼
  PipesHub API (curated tool set — see TOOLS.md)

OAuth 受保护资源发现

PipesHub 在以下地址暴露 OAuth 受保护资源发现:

PIPESHUB_INSTANCE_URL/.well-known/oauth-protected-resource/mcp

这将自动返回所有 OAuth 端点:

  • 授权:PIPESHUB_INSTANCE_URL/api/v1/oauth2/authorize

  • 令牌:PIPESHUB_INSTANCE_URL/api/v1/oauth2/token

  • 撤销:PIPESHUB_INSTANCE_URL/api/v1/oauth2/revoke

  • JWKS:PIPESHUB_INSTANCE_URL/.well-known/jwks.json


故障排除

"不兼容的认证服务器:不支持动态客户端注册"

这意味着客户端正在尝试动态注册,而不是使用你预先配置的凭据。请确保你正确传递了 --client-id 和 --client-secret(Claude Code)或 auth 对象(Cursor)。

认证失败 / 重定向错误

  • 确保 OAuth 应用中的 重定向 URI 与客户端使用的完全匹配:

    • Cursor:cursor://anysphere.cursor-mcp/oauth/callback

    • Claude Code:http://localhost:<callbackPort>/callback

    • Claude.ai:https://claude.ai/api/mcp/auth_callback

    • Gemini CLI:http://localhost:7777/oauth/callback

    • LibreChat:http://localhost:3080/api/mcp/<server-identifier>/oauth/callback

  • 确保 OAuth 应用在 PipesHub 中处于 活跃 状态(未被暂停)

无法访问 MCP 端点

  • 验证端点是否可访问:curl -X POST PIPESHUB_INSTANCE_URL/mcp(应返回 401,而不是连接错误)

  • 检查你的 PipesHub 实例是否已启用 MCP

使用 MCP Inspector 调试

npx @modelcontextprotocol/inspector

然后使用 Bearer 令牌连接到 PIPESHUB_INSTANCE_URL/mcp,直接测试端点。


常见问题

  1. 更新 PipesHub 实例上的 MCP_SCOPES 环境变量,以包含你希望通过发现端点暴露的新作用域。

  2. 更新 PipesHub 中的 OAuth 应用作用域:前往 设置 > 开发者设置 > OAuth 应用,选择你的 OAuth 应用,根据需要添加或删除作用域。

  3. 重新认证客户端——现有令牌携带的是旧作用域,因此你需要重新认证才能获得具有更新作用域的新令牌。例如:

    • Cursor:移除并重新添加 MCP 服务器,或清除缓存的 OAuth 令牌后重新连接。

    • Claude Code:运行 /mcp 并再次完成浏览器登录流程。

    • Gemini CLI:运行 /mcp auth pipeshub 重新认证。

    • Codex CLI:使用新令牌更新 PIPESHUB_BEARER_TOKEN 并重启 Codex。

    • Claude.ai:在 设置 > 连接器 中断开并重新连接连接器。

Available Tools

7 tools
pipeshub_agentsA
Read-onlyIdempotent

List the PipesHub agents configured for this org, each with its capabilities.

Agents are specialized assistants (custom system prompt, tools, knowledge scope). To converse with one, take its agentId and pass it to pipeshub_chat's agentId argument.

Each agent is returned as: { agentId, name, description, systemPrompt, startMessage, tags, webSearch, isActive, toolsets, knowledge }.

  • toolsets — what the agent can DO: each { name, tools } where name is the connector (e.g. jira, gmail) and tools are the runnable tool ids (e.g. jira.create_issue, gmail.send_email).

  • knowledge — what the agent can READ: each { name, type } (e.g. Confluence-2 / Confluence).

Route on toolsets/knowledge, not the name — names and descriptions are often generic or misleading. Match the request to the agent whose tools can actually perform it (e.g. "create a Jira ticket" → the agent whose toolset is jira and whose tools include jira.create_issue). If NO agent has a tool for the requested action, say so — don't force an unrelated agent.

The list may be empty (no agents configured). For plain Q&A when no specific agent is needed, use pipeshub_chat WITHOUT agentId and pick a chatMode: internal_search (org's indexed knowledge) or web_search (live web). Use agentId everywhere an agent is referenced.

ParametersJSON Schema
NameRequiredDescriptionDefault
searchNoOptional case-insensitive substring match across agent name, description, and tags. Omit to return every agent.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent annotations, the description discloses that the list may be empty, reveals the exact return object shape, explains the semantics of toolsets and knowledge, and warns that names/descriptions can be misleading. This is rich behavioral context that helps the agent interpret results correctly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is longer than typical, but every section earns its place: purpose, return structure, field semantics, routing guidance, and empty-list caveat. The use of bullets and bolded field names keeps it scannable and front-loaded with the core purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description fully compensates by detailing the return object, nested structures, and field meanings. It also covers edge cases (empty list, misleading names) and alternatives, making it complete for an agent to invoke and interpret correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already fully documents the single search parameter with 100% coverage, including case-insensitivity, substring matching, and omit behavior. The description adds no further parameter-level detail, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'List the PipesHub agents configured for this org, each with its capabilities.' It also clearly differentiates this tool from siblings like pipeshub_chat by explaining that this is for listing agents, not conversing with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit routing instructions: use this tool to discover agents, take the agentId, and pass it to pipeshub_chat; for plain Q&A use pipeshub_chat without agentId. It also states when to refrain from forcing an unrelated agent, providing clear when-to-use and when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pipeshub_chatA

Ask a question, get an answer grounded in the org's indexed data with citations. It reads a few retrieved passages — never a whole document, never a complete list.

Three questions this tool gets WRONG. Check them first:

  • Structure — "what's under this epic?", "which pages are in this space?", "what links to this ticket?", "what's in this folder?" → pipeshub_get_record_content mode:"navigate". Ranking cannot see how records relate.

  • Exhaustive — "how many X?", "list ALL the Y", "every Z" → mode:"navigate", which reports the group's real total. This tool undercounts and will not say so.

  • One named document — summarize it, extract from it, what does it say about X → pipeshub_search for the recordId, then mode:"content".

Everything else about the org's knowledge belongs here: policies, processes, decisions, history, "what do we know about X", and any question spanning several documents.

Internal search (default, chatMode: "internal_search"): the user's documents, files, knowledge base, company policies — anything in their PipesHub-indexed sources (Drive, Box, Confluence, Slack, Gmail, Jira, the org's KB, ...).

Web search (chatMode: "web_search"): current events or public information unlikely to be in the org's knowledge base.

Both are plain-chat modes. Agent chat — pass an agentId from pipeshub_agents — runs against that agent's own prompt, tools and knowledge; quick is its only mode, requires the agentId, and is sent automatically.

  • "What's our policy on Y?" → pipeshub_chat (internal_search)

  • "What's in the news about Z?" → pipeshub_chat (web_search)

  • "Find / locate the file named X" → pipeshub_search (then pipeshub_download_record if the user wants the bytes).

Conversation lifecycle — one tool, both start and continue:

  • First turn: omit conversationId. The server creates a new conversation; capture conversationId from the response.

  • Follow-up turn: pass the conversationId from the previous response. Server-side context is preserved — do NOT replay earlier messages, and filters is ignored on follow-ups (set once at creation).

Only re-omit conversationId (start a fresh conversation) when the user explicitly asks to start over / clear context.

The response contains the AI's answer plus citations. To download a cited document, take citations[*].recordId and call pipeshub_download_record.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesThe user's question or message for this turn.
agentIdNoOptional PipesHub agent to converse with — the `agentId` from `pipeshub_agents`. When set, this turn runs against that agent's configuration (prompt, tools, knowledge). On follow-up turns pass the SAME `agentId` together with the `conversationId` returned by the previous call. Omit for a plain (non-agent) conversation. If unsure which agent to use, call `pipeshub_agents` first to see the options.
filtersNoWhich sources the answer may use. Leave out to use all sources. Only works on the FIRST turn; later turns keep the first turn's sources.
chatModeNoResponse strategy. The valid values depend on whether `agentId` is set: - WITHOUT `agentId` (plain chat): `internal_search` — answer from the org's indexed knowledge (default) — or `web_search` — answer from the live web. - WITH `agentId` (agent chat): `quick` is the only supported mode and is sent automatically, so this argument can be omitted.
modelKeyNoModel id to use (from `pipeshub_sources` `llmModels[*].modelKey`). Defaults to the org's default LLM.
modelNameNo
conversationIdNoExisting conversation id to continue. Omit on the FIRST turn; on every subsequent turn pass the `conversationId` returned by the previous call. Server-side message history is preserved — do NOT replay prior messages.
modelFriendlyNameNo

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (readOnlyHint=false, openWorldHint=true, destructiveHint=false), the description discloses key behavioral traits: it only reads retrieved passages, never full documents or complete lists; it undercounts and will not say so; filters are ignored on follow-ups; server-side context is preserved so earlier messages must not be replayed. These are critical limitations not captured by annotations, and they directly inform agent decision-making. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but meticulously structured: core purpose first, then a highlighted 'Three questions this tool gets WRONG' section, followed by 'Everything else... belongs here', internal vs web search, conversation lifecycle, and response handling. Each section is front-loaded with the most important caveats, and every sentence provides actionable guidance. No redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers all aspects needed to use the tool correctly: its scope and limitations, the routing to alternative tools, the distinction between chat modes, the conversation lifecycle, parameter usage, and how to handle the response (capture conversationId, use citations to download documents). No output schema exists, but the description explains the response contains 'answer' plus 'citations'. It is complete for a chat tool with this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although schema coverage is 75%, the description adds substantial semantic depth to parameters. For chatMode it explains the valid values depend on agentId, and that 'quick' is sent automatically when agentId is set. For conversationId it clarifies the lifecycle (omit on first turn, pass on follow-ups, when to re-omit). For filters it notes they only work on the first turn. It also explains how to obtain agentId from pipeshub_agents, and modelKey from pipeshub_sources. This goes far beyond the schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb-resource pair: 'Ask a question, get an answer grounded in the org's indexed data with citations.' It also explicitly states what it reads ('a few retrieved passages — never a whole document, never a complete list'), which clearly scopes the tool. It further differentiates itself from siblings by naming three categories of questions it handles poorly and directing to the correct alternatives, making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit when-to-use and when-not-to-use guidance. It lists three question types (structure, exhaustive, one named document) and directs to specific sibling tools, then enumerates what belongs here (policies, processes, decisions, history). It also distinguishes internal_search vs web_search, explains agent chat modes, and gives a complete conversation lifecycle (first turn vs follow-up, when to restart). No ambiguity remains.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pipeshub_directoryA
Read-onlyIdempotent

Look up people, groups, and teams in PipesHub. Five actions — pick action. Not for documents or files: that is pipeshub_search.

  • whoami — the caller's id, email, full name. Use before get_user on yourself. Errors if the credential is expired or revoked.

  • list_users — page org users; search matches name or email.

  • get_user — full User for one userId.

  • list_groups — org groups with userCount; search matches name.

  • list_my_teams — teams the caller is on, with canEdit / canDelete / canManageMembers; search matches name.

Omit page/limit for the first page (page 1). No match is an empty users/groups/teams array, not an error. pagination.hasNextPage (teams: hasNext) says whether to request the next page.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNo1-based page for list_* actions. Omit for page 1.
limitNoItems per page for list_* (1–100). Omit for the action default: 50 users, 25 groups, 100 teams.
actionYesWhat to do: - `whoami` — return the authenticated user's identity, confirmed against the server. No other args needed. - `list_users` — paginated list of org users. Optional `page`, `limit`, `search` (substring match against name or email). - `get_user` — full profile for one user. Required `userId`. Use `whoami` to find your own id first if needed. - `list_groups` — paginated list of user groups (with `userCount`). Optional `search` matches group name. - `list_my_teams` — teams the authenticated user belongs to, with capability flags. Optional `search` matches team name.
searchNoSubstring match on list_users (name or email), list_groups (name), and list_my_teams (name). An empty list means no match, not an error.
userIdNoRequired when `action` is `get_user`. 24-character ObjectId. Take it from `whoami` (yourself) or from a `list_users` hit.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint, but the description adds significant behavioral context: error on expired/revoked credential for whoami, empty arrays for no matches, pagination via hasNextPage/hasNext, and page/limit defaults. No contradictions; the description enriches beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-structured with a clear opening, bulleted action list, and concise pagination/error notes. Every sentence adds value; no fluff. Front-loaded with the primary purpose and sibling differentiation, making it easy to scan.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers all actions, parameters, error conditions, pagination, and alternatives. Even without an output schema, it describes return arrays (users/groups/teams) and capability flags. Nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all parameters at 100%, so baseline is 3. The description adds cross-parameter dependencies (userId required for get_user, search only applies to list_* actions), clarifies action-specific requirements, and explains pagination behavior. This goes beyond schema, but the schema already provides solid descriptions, so a 4 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Look up people, groups, and teams in PipesHub.' Lists five distinct actions and explicitly differentiates from pipeshub_search for documents/files. An agent can immediately understand scope and distinguish from siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Not for documents or files: that is pipeshub_search,' naming the alternative and when not to use this tool. Also provides per-action guidance, e.g., 'Use before get_user on yourself' and explains pagination defaults and error behavior. Clear when-to-use and when-not-to-use context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pipeshub_download_recordA
Read-onlyIdempotent

Download the file as stored for one record — not PipesHub's parsed content, metadata header, or summary.

Use this when the user wants the file itself (download, attach, open). Get recordId from a chat citation or a pipeshub_search hit.

Do not use this to read, summarize, or answer "what does this doc say?" regardless of format. That is pipeshub_get_record_content mode:"content". Text formats come back inline; images, audio, and binary as base64.

convertTo accepts only application/pdf; anything else is ignored.

ParametersJSON Schema
NameRequiredDescriptionDefault
recordIdYesRecord identifier — usually a UUID for connector-sourced records or a 24-character ObjectId for uploaded records. Get it from a chat citation (`citations[*].recordId`) or from a `pipeshub_search` hit.
convertToNoThe only conversion target connectors honour is `application/pdf` (the MIME type, not `pdf`). A bare `pdf` is ignored and the original file is returned with no error. Omit for the file as stored. Does not parse the document — use `pipeshub_get_record_content` `mode:"content"` for that.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and idempotentHint=true, so the description doesn't need to restate safety. It adds valuable behavioral context: conversion behavior (only application/pdf accepted, bare 'pdf' ignored), output encoding (text inline, binary as base64), and the distinction between stored file and parsed content. No contradiction with annotations. The only minor omission is lack of error handling detail, but that is beyond typical expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is moderately long but every sentence serves a distinct purpose: purpose, usage, exclusions, and conversion behavior. It is front-loaded with the core purpose and keeps exclusions and details in later sentences. No filler or redundant phrasing; it earns its length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a download tool with two parameters and no output schema, the description covers everything an agent needs: how to obtain the recordId, what convertTo accepts, output encoding, and what this tool is not for. The sibling references complete the routing. Nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented. The description adds value beyond the schema: for recordId, it reiterates the source (citation or search) and clarifies the format expectation; for convertTo, it explains that only 'application/pdf' is honored and that 'pdf' is silently ignored. This extra context helps the agent avoid common mistakes.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a clear, specific verb and resource: 'Download the file as stored for one record'. It explicitly contrasts with parsed content, metadata header, and summary, and names the sibling tool for reading content. This fully distinguishes it from pipeshub_get_record_content without needing to inspect schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit when-to-use guidance ('Use this when the user wants the file itself') and when-not-to-use ('Do not use this to read, summarize, or answer...'), and points to the correct alternative (pipeshub_get_record_content mode:"content"). It also tells the agent where to obtain recordId, leaving no ambiguity about invocation context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pipeshub_get_record_contentA
Read-onlyIdempotent

Three operations on the org's records. Pick by what you hold:

mode:"lookup" — a URL, issue key (PA-1787), or external ID → its recordId plus the record's metadata mode:"navigate" — a question about structure: what is under X, what links to Y → browses the hierarchy mode:"content" — a recordId, and you need the document's COMPLETE text

mode:"content" (default) — the only way to see a document's complete text. Use it whenever missing part of the document could make the answer wrong: summarize, extract or list ALL of something, check whether or where a doc mentions X, review, or compare named docs. pipeshub_chat cannot do these — it never sees a whole document.

Judge by the user's INTENT, not their keywords: "what's this doc about?", "walk me through the report", "anything in here about Y?" are all full-content tasks. Get the recordId from a pipeshub_search top hit, a chat citation, or mode:"lookup".

Returns one content string: a metadata header (title, source, key fields, pre-generated summary) then the full parsed text. A record with no extractable content returns the literal No record found. Use pipeshub_download_record only for the original file bytes.

mode:"navigate" — browse the hierarchy: RecordGroup (project / space / drive / folder) → Record (epic / story / page / file) → children, with breadcrumbs, related links and record IDs.

Use it when the question depends on structure rather than wording: what is under this epic, which pages sit in this space, what is linked to this ticket, what is in this folder — and every "how many" / "all of" / "every" question. Search ranks by content; only this shows how records relate, and only this gives a count you can trust.

Omit nodeId for a flat listing of everything reachable, most recently updated first — the usual starting point. A URL, an issue key, or a pipeshub_sources id also works and resolves automatically.

Pass depth:2 or depth:3 to see several levels in ONE call — an epic's stories AND their subtasks, a space's pages AND their children — instead of one call per level. Use it whenever the question needs an overview of a hierarchy rather than a single node.

Opening a record also prints that record's own metadata — for a ticket, status, assignee, priority and dates — so a question about one record is often answered by this call alone. It returns no document text; for that, re-call with mode:"content".

Returns Path breadcrumbs, the current node's metadata, a children listing carrying record_id= or node_id= per row plus the group's total (Children 1-50 of 61), Related cross-references, and a Next: line. One page is usually every child, so only pass page:2 when that Next: line says more exist.

mode:"lookup" — turn an external reference into a recordId, the first step whenever the question names one. Returns that record's metadata (for a ticket: status, assignee, priority, dates) plus its recordId, which mode:"navigate" takes to list what is under it and mode:"content" takes to read it.

Handles Jira keys and URLs, Confluence, Drive, Slack permalinks, Linear, Notion, ServiceNow sys_id, SharePoint, Gmail/Outlook, and any connector whose records index a web URL. Resolution searches ALL connectors you can access, regardless of any source filter you used elsewhere.

A miss is a 200 with empty matches and the input echoed in not_found_identifiers — that may mean no-access, not non-existence. Use mode:"navigate" to confirm the record exists before telling the user it does not. If ambiguous is true, pick from matches rather than taking the first.

Navigate and lookup return a rendered text view whose closing Next: line names the exact follow-up call — follow it. When presenting a record, link it using the Web URL from its metadata header (when present).

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNo`content` (default) reads a record's full text by `recordId`. `lookup` resolves a URL / issue key / external ID to a recordId. `navigate` browses the knowledge graph tree.content
pageNoPage number, 1-indexed.
depthNoLevels of descendants to return in one call. Above 1, the listing is a flat list of all descendants down to that level rather than only direct children, and each row carries its own `level`.
limitNoChildren per page. The minimum is 50 — smaller values are rejected rather than silently raised.
nodeIdNoThe node to open. Take it from a `record_id=` or `node_id=` shown in a previous navigate or lookup response, from a search hit's `recordId`, or from a `pipeshub_sources` id — a KB or connector id opens that source directly. Omit it entirely for the flat listing of everything reachable, newest first — the usual starting point. A URL or an issue key such as `PA-1787` also works: it is resolved to its record automatically, so no separate lookup is needed.
recordIdNoRecord identifier — usually a UUID for connector-sourced records or a 24-character ObjectId for uploaded records. Get it from a chat citation (`citations[*].recordId`) or from a `pipeshub_search` hit. Required when `mode` is `content`.
nodeTypesNoRestrict children to these node types, e.g. `["record", "folder"]`.
identifiersNoThe reference(s) to resolve: a URL, an issue key such as `PA-1787`, or a bare external system ID. Paste each exactly as you found it — tracking parameters and fragments are handled. Pass a single string, or an array of up to 10 to resolve them in one call. Required when `mode` is `lookup`.
createdAfterNoFilter children by source creation time. ISO 8601 `YYYY-MM-DD`, or a full datetime that MUST carry a timezone offset — a naive datetime is rejected rather than assumed to be UTC.
connectorNameNoOptional hint that prioritises resolution order, e.g. `JIRA`, `CONFLUENCE`, `GOOGLE_DRIVE`, `SLACK`. It cannot widen the search beyond the connectors you can already access. Useful on a retry when a lookup came back empty.
createdBeforeNoFilter children by source creation time. `YYYY-MM-DD` is inclusive of the whole day.
modifiedAfterNoFilter children by source modification time. Same formats as `createdAfter`.
modifiedBeforeNoFilter children by source modification time. Same formats as `createdBefore`.

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (readOnlyHint=true), the description discloses return formats, edge cases ('No record found', '200 with empty matches', 'ambiguous' handling), resolution behavior ('searches ALL connectors'), pagination triggers ('only pass page:2 when Next: line says more'), and rendering details. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is lengthy but every sentence adds practical value for a tool with three modes and 13 parameters. It is front-loaded with a mode summary, uses clear section headers, and avoids filler. The structure mirrors the decision flow an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex tool with no output schema, the description fully explains return values for all modes, prerequisites (like obtaining recordId), error/edge behaviors, and sibling routing. Nothing an agent needs to invoke correctly is missing, given the rich schema and annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although schema coverage is 100%, the description adds significant contextual meaning: explains how to obtain nodeId, when to omit it, how depth affects output, how identifiers resolve automatically, and how to interpret returns like 'Children 1-50 of 61'. These are usage patterns beyond schema field definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool performs three operations (lookup, navigate, content) on the org's records, with each mode named and explained. It explicitly differentiates from siblings (pipeshub_chat cannot see whole docs, pipeshub_download_record for raw bytes), making purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use guidance per mode, including intent-based examples ('what's this doc about?' → content) and exclusions ('Use pipeshub_download_record only for the original file bytes', 'pipeshub_chat cannot do these'). Also tells when to pass depth and how to get recordId, leaving no ambiguity about selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pipeshub_sourcesA
Read-onlyIdempotent

Discover available chat sources and AI models in one call.

Returns up to three sections:

  • sources — connectors (kind: "connector") and collections (kind: "knowledgeBase"). For pipeshub_search and pipeshub_chat, put a connector id in apps and a collection id in kb. sourcesTruncated: true means the list stopped at 1,000 sources.

  • llmModels — chat / generation models. Each item's modelKey is the value to pass on pipeshub_chat as modelKey. Pick isDefault: true unless the user asks for a specific model.

  • embeddingModels — vector embedding models (only fetched when explicitly requested via include).

Call this once at the start of a session and cache the result — sources and models change infrequently.

ParametersJSON Schema
NameRequiredDescriptionDefault
includeNoWhich sections to fetch. Default: `["sources", "llmModels"]`. Add `embeddingModels` if the user is configuring re-embedding.

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, non-destructive behavior. The description adds valuable behavioral context beyond that: the 1,000-source truncation flag, conditional embedding-model fetching, and caching advice. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the one-line purpose, then organized into clear bullets for each section. Every sentence earns its place; there is no filler or repetition of annotation data.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with zero required parameters, no output schema, and comprehensive annotations, the description covers all critical information: what sections exist, their contents, defaults, truncation semantics, downstream usage, and caching recommendation. Nothing necessary for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

While the schema already documents the include enum with a default, the description enriches meaning by showing how each section is consumed elsewhere (connector ids in apps, collection ids in kb, modelKey on chat, isDefault selection). This goes beyond the schema's basic parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description opens with a specific verb and resource: 'Discover available chat sources and AI models in one call.' It then enumerates the three returned sections, each tied to concrete downstream use (e.g., modelKey for pipeshub_chat), clearly distinguishing this discovery tool from its siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit usage guidance: 'Call this once at the start of a session and cache the result' and says to add embeddingModels only when configuring re-embedding. It also explains how returned ids and modelKeys flow into pipeshub_search and pipeshub_chat, so an agent knows exactly when to invoke this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool updatev2.4.2
    • Changedpipeshub_directory5 fields changed
      • changedInput schema / properties / action / description
        Previous value: -"What to do:\n- `whoami` — return the authenticated user's identity, confirmed against the server. No other args needed.\n- `list_users` — paginated list of org users. Optional `page`, `limit`, `search` (substring match against name or email).\n- `get_user` — full profile for one user. Required `userId`. Use `whoami` to find your own id first if needed.\n- `list_groups` — paginated list of user groups (with `userCount`).\n- `list_my_teams` — teams the authenticated user belongs to, with capability flags."New value: +"What to do:\n- `whoami` — return the authenticated user's identity, confirmed against the server. No other args needed.\n- `list_users` — paginated list of org users. Optional `page`, `limit`, `search` (substring match against name or email).\n- `get_user` — full profile for one user. Required `userId`. Use `whoami` to find your own id first if needed.\n- `list_groups` — paginated list of user groups (with `userCount`). Optional `search` matches group name.\n- `list_my_teams` — teams the authenticated user belongs to, with capability flags. Optional `search` matches team name."
      • changedInput schema / properties / limit / description
        Previous value: -"Pagination — items per page. Used by list_* actions."New value: +"Items per page for list_* (1–100). Omit for the action default: 50 users, 25 groups, 100 teams."
      • changedInput schema / properties / page / description
        Previous value: -"Pagination — 1-based page number. Used by list_* actions."New value: +"1-based page for list_* actions. Omit for page 1."
      • changedInput schema / properties / search / description
        Previous value: -"Substring match against name / email. Used by list_users."New value: +"Substring match on list_users (name or email), list_groups (name), and list_my_teams (name). An empty list means no match, not an error."
      • changedInput schema / properties / userId / description
        Previous value: -"Required when `action` is `get_user`. 24-character ObjectId."New value: +"Required when `action` is `get_user`. 24-character ObjectId. Take it from `whoami` (yourself) or from a `list_users` hit."
  2. 3 tool updatesv2.4.1
    • Changedpipeshub_chat3 fields changed
      • changedInput schema / properties / filters / description
        Previous value: -"Source scoping for retrieval. Pass `apps` ids from `pipeshub_sources`. Only meaningful on the FIRST turn (when starting a new conversation)."New value: +"Which sources the answer may use. Leave out to use all sources. Only works on the FIRST turn; later turns keep the first turn's sources."
      • changedInput schema / properties / filters / properties / apps / description
        Previous value: -"Source-scoping ids from `pipeshub_sources` — connector instance and / or knowledge base ids, mixed freely. The legacy org-wide `knowledgeBase_<orgId>` id is still accepted on deployments that predate per-KB sources. Empty / omitted means no app-side restriction."New value: +"Connector ids to use. Get them from `pipeshub_sources`, where `kind` is \"connector\". Collection ids go in `kb`, not here."
      • changedInput schema / properties / filters / properties / kb / description
        Previous value: -"Legacy / unused. Leave empty."New value: +"Collection (knowledge base) ids to use. Get them from `pipeshub_sources`, where `kind` is \"knowledgeBase\"."
    • Changedpipeshub_download_record1 field changed
      • changedInput schema / properties / convertTo / description
        Previous value: -"Optional server-side format conversion target (e.g. `pdf`). When omitted, the original file bytes are returned."New value: +"The only conversion target connectors honour is `application/pdf` (the MIME type, not `pdf`). A bare `pdf` is ignored and the original file is returned with no error. Omit for the file as stored. Does not parse the document — use `pipeshub_get_record_content` `mode:\"content\"` for that."
    • Changedpipeshub_search3 fields changed
      • changedInput schema / properties / apps / description
        Previous value: -"Source-scoping ids — connector instance UUIDs and / or `knowledgeBase_<orgId>`. Get them from `pipeshub_sources`."New value: +"Connector ids to search (for example a Jira or Google Drive connection). Get them from `pipeshub_sources`, where `kind` is \"connector\". Collection ids go in `kb`, not here."
      • addedInput schema / properties / kb
        Added value: +{
        +  "description": "Collection (knowledge base) ids to search. Get them from `pipeshub_sources`, where `kind` is \"knowledgeBase\".",
        +  "items": {
        +    "type": "string"
        +  },
        +  "type": "array"
        +}
      • changedInput schema / properties / limit / description
        Previous value: -"Max number of result chunks. Default 10. Use a small value (5–10) when the goal is to resolve a filename / topic into a recordId."New value: +"Number of results. Default 10. Use 5–10 when you only need a `recordId`."
  3. 7 tool updatesv2.3.3
    • First observedpipeshub_agents
    • First observedpipeshub_chat
    • First observedpipeshub_directory
    • First observedpipeshub_download_record
    • First observedpipeshub_get_record_content
    • First observedpipeshub_search
    • First observedpipeshub_sources

TDQS

A4.7/5.0

Scored across 7 tools

Disambiguation5/5

Each tool targets a distinct operation: search locates records, chat answers grounded questions, get_record_content reads full text/navigates/looks up, download_record fetches original bytes, and agents/directory/sources handle their own domains. The descriptions explicitly cross-reference and warn against misuse, so an agent can reliably select the right tool.

Naming Consistency3/5

All tools share the pipeshub_ prefix, but the pattern after it is inconsistent: some are verb_noun (download_record, get_record_content), some are bare verbs (search, chat), and some are bare nouns (agents, directory, sources). This makes names individually readable but not predictably derivable.

Tool Count5/5

Seven tools is a well-scoped size for a knowledge retrieval and chat server. Each tool covers a major capability without unnecessary fragmentation, and no tool feels redundant.

Completeness5/5

The surface covers the full read-side workflow: discover sources, search, chat with citations, resolve external references, read full content, navigate hierarchy, download files, and look up agents and people. There are no obvious gaps or dead ends for the server's apparent purpose.

Maintenance

ActivityActive
ResponsivenessUnresponsive

Related MCP Connectors

Related MCP Servers