allmcp
v1.1.0
Published
Interactive onboarding for AllMCP: browser OAuth sign-in, agent auto-detect, and one-command setup for Claude Desktop, Claude Code, Codex, Cursor, and ChatGPT — safe config merge with automatic backup.
Downloads
661
Maintainers
Readme
allmcp
Interactive onboarding for AllMCP — every SaaS integration through a single MCP endpoint.
npx allmcpOne command: it signs you in from the browser (OAuth, no API key to copy), auto-detects your AI clients, shows you the plan before writing anything, installs, and verifies your endpoint with a real first call — in under 90 seconds.
What it sets up
| Client | How |
| --- | --- |
| Claude Desktop | Safely merges the AllMCP server into claude_desktop_config.json (macOS, Windows, Linux) |
| Claude Code | Runs the native claude mcp add … command for you |
| Codex CLI | Runs the native codex mcp add … command for you |
| Cursor | One-click cursor:// install deeplink, with a safe ~/.cursor/mcp.json merge as fallback |
| ChatGPT | Prints the connected-app steps (OAuth — configured inside ChatGPT) |
Subcommands
npx allmcp install <target> [--key <api-key>] [--yes] # non-interactive scripting path
npx allmcp login # browser OAuth sign-in (tokens go to your OS keychain)
npx allmcp logout # revoke server-side + wipe local tokens
npx allmcp whoami # signed-in account + usage
npx allmcp status # your connected providers, with health
npx allmcp doctor # Node, configs, endpoint, token expiry — with fixesKeyless by default
Configs are written without any secret: your AI client runs the AllMCP sign-in in its own browser window on first use. Prefer a pinned API key (CI, scripts, team scoping)? Pass --key allmcp_… or set ALLMCP_KEY — the key is never echoed back (prefix only) and never rides in a URL.
Safety
- Merge, never overwrite. Your existing MCP servers and every other config key are preserved.
- Backup first. The original file is copied byte-for-byte to
<file>.bakbefore any write. - Refuse rather than guess. Corrupt JSON, non-UTF-8 bytes, or unexpected shapes stop the run with a clear message — your file is left untouched.
- Atomic writes. Temp file + rename; a crash can't leave a half-written config.
- Token hygiene. OAuth tokens live in the OS keychain (Keychain / Credential Manager / libsecret), falling back to
~/.allmcp/credentials.jsonwith0600permissions.logoutwipes both.
Requires Node.js 18.17+.
Docs
Full guide: docs.allmcp.co
