Create an OAuth client in Elastic Agent Builder

Open the MCP client management page

1. Find Agents in the navigation menu. You can also search for Agent Builder in the global search bar.
2. Click Manage components at the bottom of the left sidebar, then select Tools.
3. On the tools library page, click Manage MCP, and then select Manage MCP clients (OAuth).
4. Click Add MCP client.

You can also get to this page from Admin and settings → Application connections → Manage MCP clients.

Name the client

Enter a Client name. The name is visible to users during the authorization flow, so use something that clearly identifies the application (for example, Claude Desktop — Engineering).

Select a client logo

Optionally set a Client logo to identify the application in the list. Use Select logo to choose from provided options, or select Upload logo to use a custom image.

Selecting a logo is cosmetic, and does not pre-configure any settings.

Set the redirect URI

The redirect URI tells the authorization server where to return the user after they authorize the connection. Select the redirect URI type:

• Local — For applications running on your local machine. The redirect URIs are pre-populated with http://localhost/callback and http://localhost/oauth/callback. Replace or supplement these values to match your Agent's expected callback URL. The authorization server accepts any localhost port, but the path must match exactly. Common values:
  • Claude Desktop (mcp-remote): http://localhost/oauth/callback
  • Claude Code CLI (native HTTP): http://localhost/callback
• Remote — For hosted or cloud-based applications. Enter a single https:// URL. Plain HTTP is not accepted.

For local clients that need more than one redirect URI, click Add local URL to add additional URLs.

Optional: Generate a client secret

You can optionally select Generate confidential MCP client to add a client secret for extra security. This is most useful when your MCP host can store a secret securely, such as a server-side service.

The client secret is displayed after you create the client. The secret is only displayed once and can't be retrieved later.

Save the client

Click Create client. The Copy server details for [client name] dialog displays the values your MCP host (AI agent) needs to authenticate:

• Client ID: The identifier for this client.
• MCP server URL: The endpoint your MCP host uses to reach this project's Elastic Agent Builder tools.
• Client secret: Appears for confidential clients only. This value is displayed only once and can't be retrieved later, so copy or download it before you close the dialog.

You'll use these values to connect an MCP host.

The client ID and MCP server URL can be retrieved at any time from the MCP clients page.