#Set up the MCP server
This guide walks you through connecting an AI assistant to your Hygraph project. For an overview of what the MCP server can do, see MCP server overview.
#Connection modes
Hygraph exposes two MCP endpoints.
#Project endpoint (Permanent Auth Token)
Use the project endpoint when you want a fixed project and environment, and you want the assistant limited to that token's permissions.
https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp
#Global endpoint (Hygraph login)
Use the global endpoint when the assistant should see every project you can access, then pick a project and environment in conversation. The Claude connector uses the global endpoint.
https://mcp.hygraph.com/mcp
#Prerequisites
The following prerequisites apply to the project endpoint (Claude Code, Cursor, VS Code, Windsurf, and Claude Desktop with a PAT). The Claude connector doesn't need Node.js, npx, or a PAT.
- Node.js
>= 20.18.1(required formcp-remote) npxincluded with Node.js. Verify withwhich npx- Permanent Auth Token (PAT)
#Permissions reference
The following permissions apply to the project endpoint, authenticated with a PAT. If you connect through the global endpoint instead, access follows your own Hygraph user permissions across every project you can reach. For more information, see Connection modes.
All MCP operations are governed by the permissions on your Permanent Auth Token (PAT).
To fully leverage the MCP server's functionality, you need the Read, Create, Update, and Publish permissions. If you only intend to retrieve content, the Read permission is sufficient. For more information on setting up these permissions, see our docs on Configuring permissions for Permanent Auth Tokens.
| PAT type | Read | Create | Update | Publish | Schema management | Delete |
|---|---|---|---|---|---|---|
| General MCP Server | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ |
| Management MCP Server | — | — | — | — | ✓ | ✗ |
| Read-only MCP Server | ✓ | — | — | — | — | ✗ |
| Content MCP Server | ✓ | ✓ | ✓ | ✓ | — | ✗ |
| Read-only (custom) | ✓ | — | — | — | — | ✗ |
Delete operations are never supported via MCP, for both content and schema. Destructive actions must be performed manually in Hygraph Studio. For more information, see Safety guardrails.
#Step 1 - Create a PAT
The following steps apply to the project endpoint. If you want a single connection that spans every project you can access instead, use the global endpoint.
Hygraph MCP authenticates using a bearer token. You need to supply the Permanent Auth Token (PAT) as the bearer token.
If you haven't created a PAT yet, follow these steps:
- In your Hygraph project, go to Project Settings.
- Under Access, select Permanent Auth Tokens.
- Click Generate MCP PAT.
- Choose the appropriate permission set (see Permissions reference), then click Generate MCP PAT.
- Copy the generated token.
If you've previously created a PAT and want to use it for the MCP server, follow these steps:
- In your Hygraph project, go to Project Settings.
- Under Access, click Permanent Auth Tokens.
- Copy the PAT that you want to use to configure the MCP server.
#Step 2 - Get your MCP endpoint
The following steps apply to the project endpoint. If you want a single connection that spans every project you can access instead, use the global endpoint below.
To find the MCP Server API endpoint, follow these steps:
- In your Hygraph project, go to Project Settings.
- Under Access, select Endpoints.
- Under MCP Server API, copy the endpoint.
https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp
This is the project endpoint. It's locked to one project and one environment. If you want a single connection that spans every project you can access instead, use the global endpoint below.
#Step 3 - Configure your MCP client
Each MCP client handles HTTP servers and authentication differently.
On Windows, replace "command": "npx" with "command": "npx.cmd" in all configuration examples below.
Choose your client:
#Claude Code
Claude Code has native HTTP MCP support with auth headers and does not require mcp-remote.
Recommended: Use an environment variable.
export HYGRAPH_TOKEN="your_token_here"claude mcp add hygraph https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp \--transport http \--header "Authorization: Bearer ${HYGRAPH_TOKEN}"
Alternative: Use an inline token.
claude mcp add hygraph https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp \--transport http \--header "Authorization: Bearer YOUR_HYGRAPH_TOKEN"
Scope options:
| Flag | Effect |
|---|---|
--scope local | This project only (default) |
--scope user | All your projects |
--scope global | System-wide |
Verify the setup:
# list configured serversclaude mcp listclaude> /mcp# Hygraph should appear in the list
If you see errors, run claude mcp logs hygraph or see Troubleshooting.
#Claude connector
The Claude connector uses the global endpoint, authenticated with your Hygraph login instead of a PAT.
- In Claude, go to Settings > Connectors, find Hygraph MCP, and select Connect. Otherwise, you can also find the Hygraph MCP connector directly in the Claude directory.
- Sign in to Hygraph when prompted, and click Accept.
- You might see a message that you Allow offline access. This enables Claude to keep working on Hygraph tasks in the background or on a schedule, without the app open.
On Team and Enterprise plans, an Owner may need to add the connector under Organization settings > Connectors before members can connect. Ask your Claude admin if you don't see Hygraph MCP in the directory.
After connecting, ask Claude to list your Hygraph projects, pick an environment, then run content or schema tasks.
Claude asks for permission before it uses certain tools. Choose Allow once to approve a single call, or Always allow to skip that prompt for the rest of the conversation. See the tools reference for the full list.
Enable the Hygraph MCP connector for your Claude Chat. Click + > Connectors, and turn on the toggle for Hygraph MCP.
- What Hygraph projects can I access?
- List the environments for
project, then show the content models in themasterenvironment.
If any of your editors want to connect Claude themselves, without this level of technical detail, point them to Connect an AI assistant to Hygraph. It walks through the same connector from a non-technical angle.
#Cursor IDE
Cursor's default Auto model mode is not compatible with the Hygraph MCP server. You must select a model manually before using MCP tools.
Cursor uses mcp-remote to connect to HTTP MCP endpoints.
Recommended method: Use the one-click install from Hygraph Studio to install the MCP server in Cursor.
- In your Hygraph project, go to Project Settings.
- Under Access, select Endpoints.
- Under MCP Server API, click Add to Cursor.
- Select the Permanent Auth Token you want to use for the MCP server.
- Click Add to Cursor. When prompted, open Cursor. You are redirected to the MCP server setup page in Cursor.
- Review the settings and click Install. You should see the MCP server listed in the MCP Servers section in Cursor.
Alternate method: Install the MCP server manually.
-
In Cursor, navigate to Settings.
-
In the MCP Servers section, click Add Server or Add Custom MCP.
-
Paste one of the following configurations:
- Project-specific configuration: In the
.cursor/mcp.jsonfile in your repository
{"mcpServers": {"hygraph": {"command": "npx","args": ["-y","mcp-remote@latest","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp","--header","Authorization: Bearer YOUR_TOKEN_HERE"]}}}- Global: Add to your user-level
~/.cursor/mcp.jsonfile.
{"mcpServers": {"hygraph": {"command": "npx","args": ["-y","mcp-remote@latest","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp","--header","Authorization: Bearer ${HYGRAPH_TOKEN}"],"env": {"HYGRAPH_TOKEN": "your_token_here"}}}} - Project-specific configuration: In the
#VS Code
VS Code has built-in MCP support. Add the following to .vscode/mcp.json:
{"servers": {"hygraph": {"url": "https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp","type": "http","headers": {"Authorization": "Bearer ${HYGRAPH_TOKEN}"}}},"inputs": [{"type": "promptString","id": "HYGRAPH_TOKEN","description": "Hygraph API Token","password": true}]}
Alternatively, use mcp-remote:
{"servers": {"hygraph": {"command": "npx","args": ["-y","mcp-remote@latest","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp","--header","Authorization: Bearer ${HYGRAPH_TOKEN}"],"env": {"HYGRAPH_TOKEN": "your_token_here"}}}}
For more information, see the VS Code MCP docs.
#Windsurf IDE
-
Go to Windsurf Settings → Cascade → MCP Servers → Add Server.
-
In
~/.codeium/windsurf/mcp_config.json, add:{"mcpServers": {"hygraph": {"command": "npx","args": ["-y","mcp-remote@latest","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp","--header","Authorization: Bearer ${HYGRAPH_TOKEN}"],"env": {"HYGRAPH_TOKEN": "your_token_here"}}}} -
Click Refresh Servers.
#Claude Desktop
This is the project endpoint, configured manually with a PAT and mcp-remote. For a no-code, login-based setup instead, use the Claude connector.
-
Open the config file:
- Mac:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%/Claude/config.json
If you can't find the config file, in Claude Desktop, go to Settings → Developer → Edit Config.
- Mac:
-
Add the following:
{"mcpServers": {"hygraph": {"command": "npx","args": ["mcp-remote@latest","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/{ENVIRONMENT}/mcp","--header","Authorization: Bearer YOUR_HYGRAPH_TOKEN"]}}} -
Quit and reopen Claude Desktop.
If you manage Node versions with NVM or similar tools, ensure your active Node version is >= 22 when launching Claude Desktop.
#Multi-environment configuration
For production use, we recommend using separate tokens per environment. The example below uses mcp-remote, which is compatible with Cursor, Windsurf, and Claude Desktop (PAT). For Claude Code, replace the command/args block with the --transport http syntax shown in the Claude Code section above.
{"mcpServers": {"hygraph-prod": {"command": "npx","args": ["mcp-remote","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/master/mcp","--header","Authorization: Bearer ${HYGRAPH_PROD_TOKEN}"],"env": {"HYGRAPH_PROD_TOKEN": "token_here"}},"hygraph-staging": {"command": "npx","args": ["mcp-remote","https://mcp-{REGION}.hygraph.com/{PROJECT_ID}/staging/mcp","--header","Authorization: Bearer ${HYGRAPH_STAGING_TOKEN}"],"env": {"HYGRAPH_STAGING_TOKEN": "token_here"}}}}
#Start using the MCP server
Once your MCP server is running, verify the connection is working by asking your AI assistant a simple question about your project:
- What content models exist in my Hygraph project?
- List the fields on my content models.
If the assistant returns accurate results, your connection is set up correctly. If not, see Troubleshooting.
First tasks to try:
- List all entries with status
DRAFT. This confirms read access is working. - Create a test entry and publish it. This confirms write and publish permissions are working.
- Show me the structure of my
Productmodel, and add a field to it. This confirms schema access is working.
Verify in Hygraph Studio:
After trying the tasks above, go to Hygraph Studio and check the results directly:
- Open the Content section to confirm new or updated entries appear as expected.
- Check the Schema section to verify any models or fields that were created.
- Review entry status to confirm published entries are live.
This is a good way to confirm that the AI assistant's actions have taken effect.
Tips for better results:
- Be specific about model names and field names. Your AI assistant will use them exactly as given.
- For bulk operations, describe the filter criteria clearly before stating the action. For example: Find all entries tagged
urgentand update their priority toHigh. - If a result is unexpected, ask the assistant to explain what query it ran. This helps catch permission or field name issues quickly.
Watch the following video for a practical demonstration of the Hygraph MCP server in action. This video walks through setting up and interacting with the MCP server from Cursor, showing how AI assistants can query content, inspect schema, and perform workflows using natural language.

#Security best practices
Token storage:
- Use environment variables to store tokens. Do not commit tokens to a remote repository.
- Set up secret management in CI/CD.
Token permissions:
- Create role-specific tokens in Hygraph.
- Use read-only tokens for read-only workflows.
Access control:
- Configure Content API permissions and Management API permissions in Hygraph.
- Audit token usage regularly.
- If you use the global endpoint, review user's permissions across every project they belong to.
#Troubleshooting
#401 Authorization failed
- Verify the token works in the Hygraph API playground.
- Check the token has the correct permissions for the operation (see Permissions reference).
- Confirm the header format is correct with no extra quotes or spaces:
Authorization: Bearer YOUR_TOKEN.
#Claude asks for a project or environment on every call
That's expected on https://mcp.hygraph.com/mcp. Ask it to call list_projects and list_environments first, then keep using those values. It's not expected on a project-scoped URL.
#Hygraph login succeeds but tools fail
Confirm the Hygraph user can access the project in Studio. The global endpoint uses that user's permissions, not a PAT. Agent tools still require a project and environment, and they only appear when that environment has an agent.
#MCP tools not showing or queries failing
If the MCP server connects but you cannot run queries or create entries, required tools might be disabled:
- In your AI assistant settings, go to Connectors.
- Find the Hygraph MCP connector and click Configure.
- Review tool permissions, and ensure the required tools are enabled. You can set Allow all tools for simplicity, or use Custom to enable specific tools.
#Server not found
For Cursor / Windsurf (stdio clients):
Verify npx is available:
which npx
Test mcp-remote directly:
npx -y mcp-remote@latest YOUR_ENDPOINT --header "Authorization: Bearer TOKEN"
For Claude Code:
claude mcp get hygraph # check configclaude mcp logs hygraph # check logs
For Claude Desktop (PAT):
If you're using NPM to manage Node versions, make sure you uninstall any NPM versions earlier than 22.
#MCP server tools not displayed
- Restart your IDE or MCP client.
- Check the MCP server status in your client's settings.
- Review server logs.
- Verify network access to Hygraph endpoint, and permissions associated with the Hygraph token.
#mcp-remote connection issues
mcp-remote is required for stdio-based clients (Cursor, Windsurf, Claude Desktop with a PAT) to connect to HTTP endpoints. If you face mcp-remote connection issues, you can:
- Update to the latest version:
npm install -g mcp-remote@latest - Use the absolute
npxpath in your config (which npxto find it). - Ensure Node.js version is
>= 20.18.1.
For more, see the mcp-remote npm page.
#What's next
- MCP server: What the MCP server does, its key benefits, and its safety guardrails.
- MCP tools reference: Look up every MCP tool, what it does, and which endpoint it's available on.
- AI Agents: How manual and workflow-bound agents differ, and how to configure one for MCP triggering.
- AI Guidelines: Create and assign guidelines that AI tools can read.