Polytomic provides a hosted MCP server for LLM agents and other MCP-compatible tools that need to explore and use the Polytomic API.
Use this when you want an agent to discover the right Polytomic endpoints and make API calls without hard-coding paths by hand.
Use the production endpoint:
The hosted server uses Streamable HTTP.
The hosted MCP server supports two authentication methods:
OAuth sessions run as user-mode sessions for the organization selected during the OAuth flow. Partner mode requires API key bearer authentication with headers.
For API key authentication, set this header:
If your client has a dedicated Bearer token env var field, enter only the variable name:
The environment variable value should be the raw API key, not the Bearer prefix.
The Polytomic MCP server exposes these core tools:
search - discover Polytomic API paths, methods, parameters, pagination, and auth requirements.execute - make Polytomic API requests through the MCP server.submit_mcp_feedback - send structured feedback about MCP friction or missing capabilities.For most agent workflows, the agent should use search first and execute second.
Claude Desktop supports OAuth for remote MCP connectors.
Do not add an API key header for Claude Desktop. It uses OAuth for this connector and does not expose optional Polytomic headers in this setup.
Define the environment variable before launching Codex Desktop:
On macOS, you can also set it for GUI apps with launchctl and then restart Codex Desktop:
You can also set the token directly in Headers with key Authorization and value Bearer <your-api-key>. The bearer token environment variable is preferred because it keeps the API key out of the UI and config file.
For optional Polytomic headers, use the Headers section. For example, set X-Polytomic-Access-Mode to read-only for discovery and read-only workflows.
Add the remote MCP server:
Start Claude Code and complete the OAuth prompt when the server connects. You can use /mcp inside Claude Code to check the server status.
This command stores the expanded authorization header in your Claude Code MCP configuration. Use OAuth if you do not want an API key stored in the Claude Code config.
Codex uses API key bearer authentication for this server.
Codex stores the environment variable name and reads the API key from your environment at runtime.
X-Polytomic-Access-ModeOptional. Set this to read-only to apply read-only mode for discovery, inspection, and read operations.
Example:
X-Polytomic-Auth-ModeOptional. Defaults to user.
Supported values:
user - use this with a user API key generated from the user settings page.partner - use this with a partner API key from a partner account.Example:
When you use partner, the agent can act across Polytomic organizations available to that partner account.
X-Polytomic-Partner-Org-IdOptional.
Use this when you are using partner mode and want to provide a default organization scope. Typically, this will be your partner organization ID.
Example: