One
About
Connect your agent to the apps your team already uses: Gmail, Slack, Stripe, Shopify, HubSpot, Notion, Linear, Salesforce, QuickBooks and more. One hosted MCP server with OAuth sign-in, nothing to install and no API keys
Details
- Author
- One
- Downloads
- 65
- Transport
- SSE
- Categories
- Productivity, API, Automation, AI, Project Management
Jump to
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
OneCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Remote (recommended), nothing to install:
{
"mcpServers": {
"one": {
"type": "http",
"url": "https://mcp.withone.ai/mcp"
}
}
}
The first connection opens One's consent screen in your browser. There is no API key in the config.
Local, if you prefer stdio:
{
"mcpServers": {
"one": {
"command": "npx",
"args": ["-y", "@withone/mcp"],
"env": { "ONE_SECRET": "your-one-api-key" }
}
}
}
Scoped access
On the consent screen you choose what the agent gets per connection: full access, read-only, or a specific list of actions. There is also a knowledge-only mode that removes the execute tool entirely, so the agent can read API schemas without firing live requests. Those choices are enforced server-side on every call and reflected back to the agent through each connection's access field, so it knows what it can run without guessing.
Links
- Dashboard: https://app.withone.ai
- Homepage: https://www.withone.ai/products/mcp
- Docs: https://www.withone.ai/docs/mcp
- Source (MIT): https://github.com/withoneai/mcp
- Official MCP registry: ai.withone/mcp
execute_one_action
Use this to run an API action on a platform the user has connected on One, after `get_one_action_knowledge` documented its inputs. Takes the `actionId` from `search_one_platform_actions` (or the connection's `access` list) and the `connectionKey` from `list_one_integrations`. This can create, modify, delete, or send data on the external platform — confirm irreversible operations with the user before calling. Do not use it to probe connectivity or retry a failed write blindly. Requires the `user:connections:write` OAuth scope; a knowledge-only or access-rule grant can still refuse the call.
get_one_action_knowledge
Use this immediately before executing an action: it fetches the action's knowledge document — required parameters, validation rules, and platform-specific caveats — enriched with guidance on how to call it. Never call `execute_one_action` without reading this first. Refused when the action is outside the caller's grant. Requires the `user:connections:read` OAuth scope.
list_one_integrations
Use this when you need to know which platforms the user has connected on One — and always before searching or executing. Lists the active connections with their `key` (the `connectionKey` for execution) and the `access` each grant confers: `full`, a set of allowed HTTP `methods`, or a specific list of `actions` (each with `actionId`, `title`, `method`). When a connection is action-scoped, its `actions` are exactly what may run, so you need not search. Do not guess connection keys — only use values returned here. Requires the `user:connections:read` OAuth scope.
search_one_platform_actions
Use this when you need to find an API action on a connected platform (e.g. "send an email" on gmail). Searches the platform's action catalog, scoped to the caller's grant: results are limited to actions the grant permits on that platform's connections. Returns up to 5 matching actions with their `actionId`, title, HTTP method, and path. Do not use this for action-scoped connections — their `access` list from `list_one_integrations` already names the permitted actions. Requires the `user:connections:read` OAuth scope.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"one": {
"one": {
"type": "http",
"url": "https://mcp.withone.ai/mcp"
}
}
}
}
McpServers
{
"one": {
"type": "http",
"url": "https://mcp.withone.ai/mcp"
}
}
Website·Docs·Dashboard·Changelog·X·LinkedIn
Connect your AI agents to 700+ apps through a singleMCPserver. Search for actions, read documentation, and execute API calls across platforms, without having to manage OAuth tokens or API keys.
That's it. TheOne CLIwill prompt you for your API key (get one from theOne dashboard) and configure the MCP server for your environment: Claude Desktop, Cursor, Claude Code, Windsurf, or any MCP-compatible agent.
- 700+ platforms.Gmail, Slack, Shopify, HubSpot, Stripe, Linear, QuickBooks, andmore.
- Natural language execution."read my last gmail email", "send a message to #general on Slack"
- Code generation."build a form to send emails using Gmail", "create a dashboard that lists my Linear projects"
- No tool bloat.Only 4 tools exposed regardless of how many platforms or actions you connect. Actions are search-based, so your agent's context window stays clean.
- Fine-grained access control.Restrict which actions, connections, and permission levels (read, write, admin) your agent has access to.
- Secure by default.All requests proxied through One, secrets automatically redacted, no platform API keys to manage.
"Get my last 5 emails from Gmail"
"Send a Slack message to #general: 'Meeting in 10 minutes'"
"Get all products from my Shopify store"
"Create a React form component that sends emails using Gmail"
"Build a dashboard that displays Linear users and their assigned projects with filtering"
"Create a paginatable table that fetches and displays QuickBooks invoices with search and sort"
Prefer not to run anything locally? One hosts a remote MCP server athttps://mcp.withone.ai/mcp. Point any MCP client that supports remote (HTTP) servers at that URL and authenticate with One via OAuth. There's nonpm installand noONE_SECRETto manage. You approve access in One's consent screen, where you can scope exactly which connections, actions, and permission levels the agent gets. Those choices are surfaced back to the agent through each connection'saccessfield, so it knows what it can run without searching.
Add it to your client's MCP configuration. The endpoint speaks the Streamable HTTP transport:
{ "mcpServers": { "one": { "type": "http", "url": "https://mcp.withone.ai/mcp" } } }
Some clients omittypeand take the URL alone; UI-based clients (custom connectors) just need the URL itself. On first connect, your client opens a browser to authenticate and authorize with One. After that, the same four tools are available.
The Windsurf link opens One's page in the editor's MCP marketplace, which is served from the official MCP registry where One is published asai.withone/mcp. Windsurf handles the OAuth sign-in itself once you install from that page.
If you prefer to configure the server manually instead of usingone init, install the package directly:
Then set the required environment variable:
Scope connections to a specific identity (e.g., a user, team, or organization):
ONE_IDENTITY=user_123 ONE_IDENTITY_TYPE=user
When set, the MCP server will only return connections associated with the specified identity. This is useful for multi-tenant applications where you want to scope integrations to specific users or entities.
Fine-tune what the MCP server can see and do:
ONE_PERMISSIONS=read ONE_CONNECTION_KEYS=conn_key_1,conn_key_2 ONE_ACTION_IDS=action_id_1,action_id_2 ONE_KNOWLEDGE_AGENT=true
All defaults preserve current behavior. If no access control env vars are set, the server starts with full access and all tools available.
Whatever you configure here is surfaced back to the agent:list_one_integrationsstamps each connection with anaccessfield so the agent knows up front what it can run there, without spending a turn searching. It is one of:
If you usedone init, the configuration below is already done for you. These examples are for reference or manual setups.
- Claude Desktop:MacOS:~/Library/Application\ Support/Claude/claude_desktop_config.json· Windows:%APPDATA%/Claude/claude_desktop_config.json
- Cursor:Open the Cursor menu and select "MCP Settings"
{ "mcpServers": { "one": { "command": "npx", "args": ["@withone/mcp"], "env": { "ONE_SECRET": "your-one-secret-key" } } } }
docker build -t one-mcp-server . docker run -e ONE_SECRET=your_one_secret_key one-mcp-server
All environment variables listed above can be passed as-eflags.
All requests to third-party platforms are authenticated and proxied through One's API. The MCP server never handles OAuth tokens or platform API keys directly. TheONE_SECRETkey is the sole credential required, and it is automatically redacted from all response payloads returned to clients. Sensitive headers are stripped from logged and returned request configurations.
For support, please contactsupport@withone.aior visithttps://withone.ai
Magica is your all-in-one AI platform, offering 2500+ cutting-edge tools under a single subscription.
Turn your Make scenarios into callable tools for AI assistants.
Dynamically search and call tools using UnifAI Network
Connect your AI Agents to 8,000 apps instantly.
Connect AI assistants to Automatisch for workflow automation.
Unified MCP gateway that loads 150+ AI tools into Claude Desktop via a single Docker command on Windows. Routes tool calls across specialized servers (Business Intelligence, API Hub, Content Automation, Intelligence) with centralized logging and governance. Built for teams without dedicated platform engineers.
Connect AI assistants directly to the HiveFlow automation platform.
A hub server that connects to and manages other MCP servers.
Connects AI agents to the SS&C Next Generation REST API to automate business processes.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.


