MCP servers

Corsa exposes two MCP servers. Connect either or both to Cursor, Claude, VS Code, or any MCP-compatible agent.

Server	URL	Authentication	What it does
Documentation	`https://docs.corsa.finance/mcp`	None	Search and retrieve Corsa docs from your coding tool
Platform	`https://api.corsa.finance/v1/mcp`	API key or OAuth	Query your live tenant data with `ask_corsa`

Use the documentation MCP when you are writing an integration and need accurate, up-to-date Corsa docs. Use the platform MCP when you want the agent to inspect alerts, cases, and clients in your environment.

Documentation MCP

The documentation MCP is public and requires no API key. Once connected, your coding tool can search this site, read full pages, and report docs issues — instead of relying on training data. You can also connect from any page on this site. Open the contextual menu and choose Copy MCP server URL, Connect to Cursor, or Connect to VS Code.

Cursor

Add to .cursor/mcp.json (project) or your global Cursor MCP config:

{
  "mcpServers": {
    "corsa-docs": {
      "url": "https://docs.corsa.finance/mcp"
    }
  }
}

Claude Code

claude mcp add --transport http corsa-docs https://docs.corsa.finance/mcp

Claude Desktop

Add to claude_desktop_config.json, or add a custom connector with this URL:

{
  "mcpServers": {
    "corsa-docs": {
      "url": "https://docs.corsa.finance/mcp"
    }
  }
}

VS Code

Add to .vscode/mcp.json:

{
  "servers": {
    "corsa-docs": {
      "type": "http",
      "url": "https://docs.corsa.finance/mcp"
    }
  }
}

What you can do

Once connected, the agent can:

Search the Corsa knowledge base for API guides, SDKs, webhooks, and product docs
Open a specific page and read the full content
Submit feedback when a page is incorrect, outdated, or incomplete

Pair this with AI skills so the agent both retrieves current docs and follows Corsa integration patterns.

Platform MCP

Corsa also exposes a Streamable HTTP MCP endpoint at /v1/mcp. This lets any MCP-compatible AI tool — Claude, Cursor, VS Code, or a custom agent — connect to your Corsa platform and query it using natural language via the ask_corsa tool.

Authentication

The MCP endpoint supports two authentication methods.

Option 1: Bearer token (API key)

Use the same Bearer token format as the REST API:

Authorization: Bearer <API_TOKEN>:<API_SECRET>

Create API keys in the Corsa dashboard under Developers Hub > API Keys. This is the simplest option for server-to-server or development use.

Option 2: OAuth (Authorization Code + PKCE)

For interactive tools like Claude Desktop, Cursor, or Notion Custom Agents (Business and Enterprise plans), Corsa supports standard OAuth 2.0 Authorization Code flow with PKCE and dynamic client registration. Compatible MCP clients discover and use this flow automatically.

How it works

Your MCP client sends an unauthenticated request to /v1/mcp.

The server responds with 401 and a WWW-Authenticate header pointing to the protected resource metadata:

WWW-Authenticate: Bearer resource_metadata="https://api.corsa.finance/.well-known/oauth-protected-resource"

The client fetches the metadata, discovers the authorization server, and initiates Authorization Code + PKCE with the Corsa Auth0 tenant.
After the user authorizes, the client receives an access token and uses it for all subsequent MCP requests.

Discovery endpoints

Endpoint	RFC	Purpose
`GET /.well-known/oauth-protected-resource`	RFC 9728	Lists the authorization server and supported scopes
`GET /.well-known/oauth-authorization-server`	RFC 8414	Returns authorization and token endpoint URLs
`POST /oauth/register`	RFC 7591	Dynamic client registration — returns the public `client_id`

Most MCP clients handle this discovery automatically. You do not need to call these endpoints manually.

OAuth parameters

Parameter	Value
Grant type	`authorization_code`
PKCE method	`S256`
Client type	Public (no `client_secret`)
Scopes	`openid profile email`
Token type	Bearer (JWT)

Endpoint

POST https://api.corsa.finance/v1/mcp

This is a Streamable HTTP MCP endpoint — the transport layer is handled by your MCP client. You configure your AI tool to connect to it rather than calling it directly with curl.

Configuration

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "corsa": {
      "type": "http",
      "url": "https://api.corsa.finance/v1/mcp",
      "headers": {
        "Authorization": "Bearer ${CORSA_API_TOKEN}:${CORSA_API_SECRET}"
      }
    }
  }
}

For OAuth, omit headers — Claude Desktop will discover and initiate the OAuth flow automatically.

Claude Code

Add to .claude/settings.json (project) or ~/.claude/settings.json (global):

{
  "mcpServers": {
    "corsa": {
      "type": "http",
      "url": "https://api.corsa.finance/v1/mcp",
      "headers": {
        "Authorization": "Bearer ${CORSA_API_TOKEN}:${CORSA_API_SECRET}"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "corsa": {
      "type": "http",
      "url": "https://api.corsa.finance/v1/mcp",
      "headers": {
        "Authorization": "Bearer ${CORSA_API_TOKEN}:${CORSA_API_SECRET}"
      }
    }
  }
}

For OAuth-capable Cursor versions, omit headers and Cursor will initiate the OAuth flow on first use.

EU region

For EU-hosted platforms, use https://api.eu.corsa.finance/v1/mcp instead.

What you can do

Once connected, your AI tool can use the ask_corsa tool to query your platform in natural language:

“Show me the last 10 high-priority alerts”
“How many open cases are assigned to me?”
“Find clients with a risk score above 80”
“What alerts were created in the last 24 hours?”
“Summarize the investigation for case CASE-1234”

The tool translates natural language into API calls against your platform and returns structured results.

What’s next

Authentication

Create API keys and understand the Bearer token format.

AI Skills

Install skills into your coding tool for guided API integration.

API Reference

Full OpenAPI spec (requires API credentials).

Webhooks

Receive real-time events from Corsa in your application.

API

Webhooks

AI Skills

Javascript

Python

Documentation MCP

Cursor

Claude Code

Claude Desktop

VS Code

What you can do

Platform MCP

Authentication

Option 1: Bearer token (API key)

Option 2: OAuth (Authorization Code + PKCE)

How it works

Discovery endpoints

OAuth parameters

Endpoint

Configuration

Claude Desktop

Claude Code

Cursor

EU region

What you can do

What’s next

Authentication

AI Skills

API Reference

Webhooks

​Documentation MCP

​Cursor

​Claude Code

​Claude Desktop

​VS Code

​What you can do

​Platform MCP

​Authentication

​Option 1: Bearer token (API key)

​Option 2: OAuth (Authorization Code + PKCE)

How it works

Discovery endpoints

OAuth parameters

​Endpoint

​Configuration

​Claude Desktop

​Claude Code

​Cursor

​EU region

​What you can do

​What’s next

Authentication

AI Skills

API Reference

Webhooks

Documentation MCP

Cursor

Claude Code

Claude Desktop

VS Code

What you can do

Platform MCP

Authentication

Option 1: Bearer token (API key)

Option 2: OAuth (Authorization Code + PKCE)

Endpoint

Configuration

Claude Desktop

Claude Code

Cursor

EU region

What you can do

What’s next