Single URL Model
Connexsus exposes one MCP endpoint for all enabled integrations. Clients should use the same URL and then follow menu-first discovery: search_tools -> enable_integration -> refreshtools/list.
Authentication Headers
In strict OBO mode, send Authorization: Bearer <CXEXEC_TOKEN> for all MCP calls and persist Mcp-Session-Id between requests. Legacy cxmcp_* and direct Supabase JWT execution auth are deprecated.
Client-Specific Tips
Keep one named server entry (for example connexsus) in each tool, rotate keys from Settings when needed, and verify connectivity with a simple tools/list call before prompting agents.
Discovery prompts like show me database mcp servers map to deterministic non-mutating actions when discovery intents are enabled.