# Connect Claude to Sovrium over MCP

You want Claude (Desktop, Code, or any MCP client) to read and act on a Sovrium app's tables, automations, and actions — securely, over the [Model Context Protocol](/en/docs/mcp-integration).

## Enable the MCP server

It is off by default. Turn it on and mint a role-scoped bearer token:

```bash
export MCP_ENABLED=true
export MCP_TRANSPORT=streamable-http
export MCP_AUTH_STRATEGY=token
export MCP_TOKEN_ADMIN="$(openssl rand -hex 32)"
sovrium start app.ts
```

The server mounts one JSON-RPC endpoint at `/mcp`. The connecting token's role drives RBAC — hand out a `viewer` token and the client only ever sees read tools.

## Point Claude at it

Add an entry to your client's `mcpServers` config (the token goes in an `Authorization: Bearer` header per your client's setup):

```json
{
  "mcpServers": {
    "my-app": { "url": "https://your-app.example.com/mcp", "transport": "http" }
  }
}
```

## Verify

Ask Claude to list your app's tables — it calls the MCP tools and returns live data.

## Next

- [MCP Integration](/en/docs/mcp-integration) — every token, transport, and tool the server exposes.
- [Auth & RBAC](/en/docs/auth-roles-rbac) — the roles a token maps to.