Connection endpoint
Use the Streamable HTTP endpoint:Use the complete URL, including
/mcp. https://mcp.quo.com on its own is not an MCP transport endpoint.Official Claude connector
Quo’s official Claude connector is named Quo.1
Open Claude's connector directory
In Claude, open Settings → Connectors, then browse the connector directory. You can also open the Quo connector listing.
2
Select Quo
Find Quo and choose Connect.
3
Authorize the connection
Sign in to the Quo account you want to connect and approve access. Return to Claude after authorization completes.
Official ChatGPT connector
Quo’s official ChatGPT connector is named Quo MCP.1
Open ChatGPT connector settings
In ChatGPT, open Settings → Connectors and browse the available connectors.
2
Select Quo MCP
Find Quo MCP and choose Connect.
3
Authorize the connection
Sign in to the Quo account you want to connect and approve access. Return to ChatGPT after authorization completes.
Other MCP clients
If your client supports remote MCP servers, add the Streamable HTTP endpoint:serverUrl instead of url, or provide a form where you paste only the server URL. Follow your client’s instructions for adding a remote Streamable HTTP server.
After saving the connection, the client should open a browser to complete OAuth authorization. If it does not, look for an Authenticate, Connect, or Sign in action in the client’s MCP settings.
Authentication and dynamic client registration
Quo MCP uses the OAuth 2.1 Authorization Code flow with S256 PKCE. Compatible clients can discover the OAuth endpoints and register dynamically, so most third-party client developers do not need to request a static client ID or secret from Quo.1
Discover OAuth metadata
Start discovery from the MCP resource URL. Quo publishes protected-resource and authorization-server metadata that identify the authorization, token, and registration endpoints.
2
Register the client
If the client is not preconfigured, register it at the advertised
registration_endpoint using RFC 7591 dynamic client registration. Persist the returned client credentials and reuse them for future authorizations.3
Generate PKCE parameters
Generate a high-entropy code verifier and its SHA-256 challenge. Quo accepts
S256 only; the plain challenge method is not supported.4
Request the user's authorization
Open the advertised authorization endpoint with
response_type=code, the registered redirect URI, state, and the S256 code challenge.5
Complete consent and Quo sign-in
For a dynamically registered third-party client, Quo first shows the client-reported name and redirect host. The user then signs in to Quo and approves the connection.
6
Exchange and refresh tokens
Exchange the authorization code with the original verifier. Store the resulting tokens securely, save each rotated refresh token atomically, and reauthorize if the server returns
invalid_grant.OAuth endpoints
Clients should read the discovery metadata instead of hard-coding every OAuth endpoint. The metadata is the source of truth if the server configuration changes.
Dynamic registration requirements
- Register no more than five redirect URIs.
- Use an absolute HTTPS redirect URI. Loopback hosts such as
localhostand127.0.0.1may use HTTP for local clients. - Do not include user information or a URL fragment in a redirect URI.
- Send the exact registered redirect URI during authorization and token exchange.
- Keep
client_nameat 120 characters or fewer. Quo displays this self-reported value to the user for third-party consent. - Public clients should use S256 PKCE and can register with
token_endpoint_auth_methodset tonone.
Troubleshooting
The client opens the documentation site
Confirm that the server URL includes/mcp. The correct Streamable HTTP endpoint is https://mcp.quo.com/mcp.
The client never opens a sign-in window
Confirm that the client supports OAuth for remote MCP servers. Then look for an Authenticate or Connect action in its MCP settings. Local-only clients that support only stdio cannot connect directly to the hosted endpoint.Authorization fails or repeatedly restarts
- Disconnect Quo in the MCP client, add it again, and complete a fresh authorization.
- For a custom client, reuse the registered
client_id, send the exact registered redirect URI, and use S256 PKCE. - Persist the newest refresh token after every successful refresh. A stale or revoked grant requires a new authorization.
The wrong Quo workspace is connected
Disconnect the integration in the MCP client. In your browser, sign in to the intended Quo account and then reconnect.Next steps
- Review the complete tool list.
- Apply the security best practices before enabling write actions.