Skip to main content
@usesuperflow/mcp is a small program your AI tool starts on your computer. It talks to your tool locally and forwards every request to the Superflow MCP server, so you get the same 101 tools as the hosted connector. It needs Node.js 20 or later. Use it when your tool runs local MCP servers (Claude Desktop, Claude Code, Cursor, Gemini CLI), when you want to use an API key, in CI, or when you want read-only mode.

​
Option A: sign in once with the browser

1

Run the login command

It opens Superflow’s consent screen. Sign in (or sign up), pick the workspace and the permissions, and approve. The terminal finishes on its own.
2

Add the server to your AI tool, with no key

For Claude Code:
For Claude Desktop, Cursor or Gemini CLI, use the config in Option B and leave out the env block.
Everything the tools use except four you add by name: Invite people (users:invite, sends real email), Remove people (users:write), Manage workspace settings (workspace:write, also creates and revokes API keys) and Read team members (users:read, no tool needs it).--scope replaces the list. Name every permission you want, separated by spaces or commas:
A sign-in’s permissions cannot change later, so run login again to change them. npx -y @usesuperflow/mcp login --help prints both lists.
In the macOS Keychain, the Linux Secret Service, or a file only you can read (~/.config/superflow-mcp/credentials.json, or under %APPDATA% on Windows). The login command says which. Access renews in the background while the server runs.npx -y @usesuperflow/mcp logout ends the sign-in and removes it. You can also revoke it in Superflow under Settings > Integrations > API keys, in Connected AI apps.
Each version on npm carries a signed provenance statement that links it to the exact source commit it was built from. npm shows it on the package page, and npm audit signatures checks it.

​
Option B: use an API key

Create a key in Superflow. The key’s setup panel gives you these snippets with your key already filled in.

​
Settings

​
Read-only mode

Set SUPERFLOW_READ_ONLY=true and the 56 tools that change data are hidden. A call to one is refused on your computer before it reaches Superflow. The 45 read tools stay, so the assistant can still read, filter, count, export, look up projects and runs, and estimate what a run would cost. The prompts still work.
For a hard guarantee, also use a key without any write permission. Then even a tool outside read-only mode cannot change anything.