OAuth is the default. You don’t create or paste an API key. The first time your agent touches a VibeFlow tool, your browser opens, you sign in, click Allow access, and you’re done. Prefer a long-lived key for scripts or CI? See Canvas MCP.
The one-paste setup
The fastest path for agents that can configure their own MCP servers (OpenClaw, Hermes, Claude Code, and most agentic CLIs). Paste this into the chat:vibeflow.ai/claude, vibeflow.ai/codex, vibeflow.ai/claw, vibeflow.ai/cursor, vibeflow.ai/hermes. Each page serves agent-readable setup instructions, so the agent wires itself up and asks you to approve access once.
If your client can’t self-configure, use the per-client steps below.
Claude (web & desktop)
1
Open Connectors
In Claude, go to Settings → Connectors.
2
Add a custom connector
Click Add custom connector, name it
VibeFlow, and paste:3
Approve access
Claude opens VibeFlow in your browser. Sign in and click Allow access. The canvas tools appear in Claude’s tool list immediately.
Claude Code
/mcp inside Claude Code and pick vibeflow to sign in — it opens your browser for the one-time approval. No --header flag needed; OAuth handles auth.
Cursor
One click: hit Install in Cursor on vibeflow.ai/cursor. Cursor prompts you to sign in on first use. Or manually — add to~/.cursor/mcp.json:
Codex
Add to~/.codex/config.toml:
vibeflow, URL https://tool.vibeflow.ai/mcp.
OpenClaw
Paste into your OpenClaw chat:Hermes Agent
Paste into your Hermes chat:mcpServers block as OpenClaw above to Hermes’ MCP configuration.
Copilot (VS Code)
Create.vscode/mcp.json in your workspace:
Anything else
Any MCP client that speaks Streamable HTTP with OAuth works:Prompts to try
Once connected, verify the loop end-to-end:- “Draft an X post about the bug we just fixed — keep it under the limit, my account isn’t Premium.”
- “Draft a LinkedIn post about this week’s release, have the design agent make a graphic for it, and attach it.”
- “Take the copy in this doc and turn it into a LinkedIn carousel post.”
- “Upload the photo at ./team.jpg and put it on the draft.”
- “What’s on my calendar this week? Move Thursday’s post to Friday morning.”
Getting good posts out of your agent
The in-app VibeFlow content agent follows a house playbook; your agent can too. Three habits that separate good sessions from bad ones:- Platform first. A post is written for LinkedIn, for X, or both — and that’s the user’s call. Copy pasted across platforms reads as spam on both.
- Make it look. After the design agent produces a graphic, have your agent call
screenshot_canvas_framesand fix what’s off before attaching it withset_post_graphic. - Confirm before it leaves.
schedule_postandpublish_postrequire an explicit yes on the exact post and time — good agents echo the post back and wait.
Troubleshooting
- Tools don’t appear after setup — complete the OAuth round-trip first: trigger any VibeFlow tool once, approve in the browser, then retry. Some clients only list tools after the first successful auth.
- Browser never opens — your client may not support OAuth discovery. Fall back to an API key with an
Authorization: Bearerheader. - Agent behaves oddly mid-session — long agent sessions drift. Restart the session; the connector and its auth survive.
- “Insufficient credits” errors — tool calls bill like in-app usage. See Credits.
Next
Tool reference
Every tool, signature, and behavior.
VibeFlow MCP overview
Transport, auth modes, and pricing.