CiteAnything MCP Server

Install in Codex

codex plugin marketplace add veriglow/citeanything-plugin --ref main && codex plugin add citeanything@citeanything

This is the verified public-GitHub path for Codex CLI 0.152.0. It installs one Agent Skill plus one remote MCP server. On the first protected tool call, Codex opens citeanything.app in your browser. Log in, review the five permissions, and approve the connection. No Skill Key, environment variable, copied authorization code, or hand-edited MCP JSON is required.

The portable installer still discovers the complete package, but plugins@1.3.4 does not finish Codex 0.152.0's native installation registration. Until that upstream gap closes, treat this as a package-discovery and host-candidate path rather than the verified Codex install command:

npx plugins add veriglow/citeanything-plugin

Related MCP server: repository-runtime

Install in other agents

Claude Code 2.1.229 installs the complete package through its native marketplace commands:

claude plugin marketplace add veriglow/citeanything-plugin && claude plugin install citeanything@citeanything --scope user

Kimi Code 1.9.0 has no native kimi plugin command. Its managed plugin store accepts the package through the adapter CLI:

npx plugins@1.3.4 add veriglow/citeanything-plugin --target kimi --scope user --yes

Cursor Agent can register the public marketplace from the command line, after which installation is completed in Cursor's /plugin interface:

agent plugin marketplace add https://github.com/veriglow/citeanything-plugin.git

Restart the target agent after installation. Browser OAuth begins when the installed MCP server is first used. Current end-to-end limits remain explicit in the host matrix below.

What agents receive

• One canonical Skill for selecting exact evidence, building anchors, placing citation markers, and keeping private knowledge-base material private.

• One first-party Streamable HTTP MCP service at https://citeanything.app/mcp.

• Exactly nine product tools with browser OAuth, per-tool scopes, refresh rotation, and user revocation.

CiteAnything deliberately does not provide general web search, open, click, find, crawl, browser automation, or arbitrary page-fetching tools. Use your host agent's own web tools to inspect the original source; use CiteAnything after the evidence is known.

Package layers

• plugin.json, mcp.json, and skills/ are the canonical, vendor-neutral Agent Plugins 1.0 package.

• .plugin/ is a generated Open Plugin input adapter for the Vercel Labs plugins CLI.

• .codex-plugin/, .claude-plugin/, .cursor-plugin/, .kimi-plugin/, .mcp.json, and agents/* are generated host adapters. Their syntax differs, but their endpoint, Skill, and tool contract are identical.

• The plugins CLI is one distribution adapter. It neither defines nor owns CiteAnything's canonical plugin format.

Host status

The package includes generated adapters for Codex, Claude Code, Cursor, and Kimi Code. Agent Plugin discovery finds both the Skill and remote MCP contribution, but current installers do not activate every host the same way.

The detailed, redacted evidence is in compatibility/2026-09-02.md. A host becomes fully verified only after install, browser OAuth, tool execution, restart, refresh, uninstall, and server-side revocation pass.

Update, uninstall, and revoke

• Re-run the install command to install the current repository release.

• Remove CiteAnything through the target host's plugin or MCP settings. Host-specific storage and removal behavior differs, so the Plugin page records the verified path for each host version.

• Revoke any live OAuth session from Connected apps. Removal and revocation are separate on purpose: revocation immediately disables server access even if a host left cached metadata behind.

Other installation paths

These are fallbacks for hosts that cannot install a complete Agent Plugin:

• Standalone Skill: install skills/citeanything/SKILL.md, or fetch the released Skill from https://citeanything.app/SKILL.md.

• Direct remote MCP: configure https://citeanything.app/mcp as a Streamable HTTP MCP server. The client must support MCP OAuth discovery and PKCE.

• Claude Code 2.1.229 MCP fallback: claude mcp add --scope user --transport http citeanything https://citeanything.app/mcp

• Kimi Code CLI 1.9.0: kimi mcp add --transport http --auth oauth citeanything https://citeanything.app/mcp, then kimi mcp auth citeanything

• Cursor App 3.18.25 / Agent 2026.08.31: run agent plugin marketplace add https://github.com/veriglow/citeanything-plugin.git, then choose Customize → Add → From Marketplace and install CiteAnything for your user. Authenticate the detected MCP server when Cursor prompts you.

• Portable installer candidate: npx plugins add veriglow/citeanything-plugin; verify activation in the host's native plugin and MCP views after installation.

• Legacy stdio: run the compatibility server in compatibility/stdio with a scoped Skill Key. This manual path exists for older clients and is not the primary v0.2 flow.

Version 0.2 one-click OAuth targets the international citeanything.app account system. The China service continues to use its existing manual compatibility path; the package never silently moves credentials or data between regions.

Troubleshooting

• If the Skill appears but no CiteAnything tools do, restart the host and confirm its installed MCP entry points to https://citeanything.app/mcp.

• If sign-in does not open, ask the host to reconnect or authenticate the citeanything MCP server; do not work around it by pasting tokens into chat.

• If a revoked client keeps failing, remove its cached MCP connection in the host and connect again.

• Run npx plugins discover veriglow/citeanything-plugin --debug to distinguish package discovery from host activation. Report the host name/version and non-secret error text in a GitHub issue.

Package contract

contracts/tools.json is the versioned source of truth for the public tool names, JSON Schemas, annotations, and OAuth scopes. The hosted MCP server, generated adapters, stdio fallback, contract tests, and future training-trajectory adapters consume the same contract.

npm run generate
npm test
npm run verify
npx plugins discover . --debug

Generation is deterministic and verification fails if a host adapter, Skill copy, contract hash, or public tool allowlist drifts.

Public entry points

• Plugin guide: https://citeanything.app/plugin

• Canonical Skill: https://citeanything.app/SKILL.md

• Machine-readable metadata: https://citeanything.app/plugin/manifest.json

• MCP resource: https://citeanything.app/mcp

License

MIT