From b1d60aaa37db936f1426ac99834d85b00967b211 Mon Sep 17 00:00:00 2001 From: andypalmi Date: Tue, 29 Sep 2026 14:39:40 +0200 Subject: [PATCH 1/3] Link Claude setup to the FlowFuse connector in Claude's directory --- docs/user/expert/third-party-agents.md | 4 ++- .../components/dialogs/AiConnectorModal.vue | 36 ++++++++++++++++--- 2 files changed, 35 insertions(+), 5 deletions(-) diff --git a/docs/user/expert/third-party-agents.md b/docs/user/expert/third-party-agents.md index 9225d3a1cb..2730240756 100644 --- a/docs/user/expert/third-party-agents.md +++ b/docs/user/expert/third-party-agents.md @@ -70,7 +70,9 @@ Custom connectors live behind developer mode. Turn it on under **Settings**, the ### Claude -Where custom connectors are available on your plan, add one and enter the FlowFuse MCP address. +[Connect FlowFuse to Claude](https://claude.ai/directory/flowfuse) from the FlowFuse connector in Claude's directory, choose **Connect to Claude** and sign in. + +For a self-hosted platform, where custom connectors are available on your plan, add one and enter your platform's MCP address. On Team and Enterprise plans an owner adds the connector for the organisation first, then each person connects and signs in individually. diff --git a/frontend/src/components/dialogs/AiConnectorModal.vue b/frontend/src/components/dialogs/AiConnectorModal.vue index 644a8e3649..cae032936a 100644 --- a/frontend/src/components/dialogs/AiConnectorModal.vue +++ b/frontend/src/components/dialogs/AiConnectorModal.vue @@ -35,7 +35,19 @@

01

{{ client.step1Title || 'Copy the FlowFuse connector URL' }}

{{ client.step1Body || 'Paste it into your agent in the next step.' }}

-
+
+ + {{ client.step1Label }} + + +
+
{{ stepOneText(client) }} @@ -50,7 +62,7 @@

02

{{ client.step2Title }}

{{ client.step2Body }}

-
+
(this.isCloud && client.cloud) ? { ...client, ...client.cloud } : client) } }, methods: { From c99a08ef650b260057ac8350442d69e6d76cebcf Mon Sep 17 00:00:00 2001 From: andypalmi Date: Tue, 29 Sep 2026 14:50:21 +0200 Subject: [PATCH 2/3] Reword the Claude connector steps and describe permissions generically --- docs/user/expert/third-party-agents.md | 6 +++--- docs/user/mcp.md | 2 +- frontend/src/components/dialogs/AiConnectorModal.vue | 7 +++---- 3 files changed, 7 insertions(+), 8 deletions(-) diff --git a/docs/user/expert/third-party-agents.md b/docs/user/expert/third-party-agents.md index 2730240756..fb1ce5bd1f 100644 --- a/docs/user/expert/third-party-agents.md +++ b/docs/user/expert/third-party-agents.md @@ -35,7 +35,7 @@ The same three steps, written out: 2. **Sign in.** FlowFuse uses OAuth, so your agent sends you to a FlowFuse login page. If your client asks for an OAuth client ID or secret, leave them blank; FlowFuse registers your client for you. -3. **Choose what the agent may do.** Signing in takes you to a FlowFuse authorization page. There you pick read-only or full access, scope it to all your teams or specific teams, and set an expiration date for the grant. +3. **Select teams and permissions.** Signing in takes you to a FlowFuse authorization page. There you choose which teams the agent can reach and the permissions it has in each, and set an expiration date for the grant. Your agent is now connected. If your client does not support OAuth, use a token instead, see [clients without a sign-in flow](#clients-without-a-sign-in-flow). @@ -112,13 +112,13 @@ The config format is the client's, not FlowFuse's. Two JSON shapes are common, o Each FlowFuse tool carries its recommended usage and permissions, so a connected agent knows what it is for before calling it. Most MCP clients then ask you to confirm before running a tool. That prompt is the client's, not FlowFuse's, so its look and whether you can turn it off vary. FlowFuse Expert's own approval cards do not apply here. -What FlowFuse enforces on every call is your grant: the teams, and read-only or full access. Each tool carries the access it needs, and FlowFuse rejects a call whose tool reaches past your grant, whether the grant came from signing in or from a token's scope. +What FlowFuse enforces on every call is your grant: the teams and permissions you selected. Each tool carries the access it needs, and FlowFuse rejects a call whose tool reaches past your grant, whether the grant came from signing in or from a token's scope. Actions an agent takes appear in the [audit log](/docs/user/logs/#ai-agents-and-api-activity), attributed to your account and marked as having come from a connected agent. ## If something is not working -**A change was refused.** The agent has read-only access. Re-connect it and grant full access. +**A change was refused.** The agent was not granted that permission. Re-connect it and select the permission it needs. **The agent cannot reach a team.** That team was not included when you signed in. Re-connect and include it. diff --git a/docs/user/mcp.md b/docs/user/mcp.md index 7bf70f5759..07a5fd1357 100644 --- a/docs/user/mcp.md +++ b/docs/user/mcp.md @@ -75,4 +75,4 @@ Access comes at one of two levels: With **FlowFuse Expert**, an agent acts with the same access you have on the team you are working in. -With **your own agent**, you choose the access when you connect. Signing in over OAuth takes you to a FlowFuse page where you pick read-only or full access, scope it to all your teams or specific teams, and set an expiration date. A personal access token, for clients without a sign-in flow, carries the same read-only or full-access choice. +With **your own agent**, you choose the access when you connect. Signing in over OAuth takes you to a FlowFuse page where you choose which teams the agent can reach and the permissions it has in each, and set an expiration date. A personal access token, for clients without a sign-in flow, carries the same choice of teams and permissions. diff --git a/frontend/src/components/dialogs/AiConnectorModal.vue b/frontend/src/components/dialogs/AiConnectorModal.vue index cae032936a..86a9b8b31b 100644 --- a/frontend/src/components/dialogs/AiConnectorModal.vue +++ b/frontend/src/components/dialogs/AiConnectorModal.vue @@ -78,8 +78,7 @@

03

-

Sign in and choose what it reaches

-

Pick which teams it acts on, and whether it can edit or only read.

+

Select teams and permissions

@@ -131,11 +130,11 @@ const CLIENTS = [ step2Url: 'https://claude.ai/', cloud: { step1Title: 'Open the FlowFuse connector', - step1Body: 'FlowFuse is listed in the Claude connector directory.', + step1Body: 'The official FlowFuse MCP connector is available in Claude.', step1Label: 'Connect to Claude', step1Url: 'https://claude.ai/directory/flowfuse', step2Title: 'Choose Connect to Claude', - step2Body: 'Claude takes you to FlowFuse to sign in.', + step2Body: 'Claude opens FlowFuse.', step2Url: null } }, From 86420a45bfc91f779af04b4d1359ee1b5b671bec Mon Sep 17 00:00:00 2001 From: andypalmi Date: Tue, 29 Sep 2026 15:06:04 +0200 Subject: [PATCH 3/3] Add the Claude Code connector route for FlowFuse Cloud --- docs/user/expert/third-party-agents.md | 4 +++- frontend/src/components/dialogs/AiConnectorModal.vue | 9 ++++++++- 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/docs/user/expert/third-party-agents.md b/docs/user/expert/third-party-agents.md index fb1ce5bd1f..c272a891a6 100644 --- a/docs/user/expert/third-party-agents.md +++ b/docs/user/expert/third-party-agents.md @@ -78,7 +78,9 @@ On Team and Enterprise plans an owner adds the connector for the organisation fi ### Coding agents -A coding agent can add the connector to itself. Ask it, rather than editing its configuration by hand: +In Claude Code signed in with a Claude account, FlowFuse Cloud is already available as a connector. Run `/mcp`, open **Show unused connectors**, select FlowFuse and choose **Authenticate**. + +With an API key, on self-hosted, or in another coding agent, ask the agent to add the connector to itself, rather than editing its configuration by hand: ``` Add the FlowFuse MCP tool at https://app.flowfuse.com/mcp. Then ask me to complete the sign-in in the browser that opens. diff --git a/frontend/src/components/dialogs/AiConnectorModal.vue b/frontend/src/components/dialogs/AiConnectorModal.vue index 86a9b8b31b..69638f5363 100644 --- a/frontend/src/components/dialogs/AiConnectorModal.vue +++ b/frontend/src/components/dialogs/AiConnectorModal.vue @@ -170,7 +170,14 @@ const CLIENTS = [ step2Title: 'Paste it into Claude Code', step2Body: 'It adds the connector itself, then asks you to finish signing in.', step2Label: 'See the documentation', - step2Url: 'https://flowfuse.com/docs/user/expert/third-party-agents/' + step2Url: 'https://flowfuse.com/docs/user/expert/third-party-agents/', + cloud: { + step1Title: 'Open the MCP list', + step1Body: 'Run this in Claude Code.', + step1Command: () => '/mcp', + step2Title: 'Select FlowFuse and choose Authenticate', + step2Body: 'Find it under Show unused connectors.' + } }, { id: 'codex',