https://mcp.slipway.sh/mcp. Settings → MCP in the console shows the exact endpoint for your installation.
Create a token
In the console, open Settings → MCP, which requires admin, and choose New token. Give it a name, a role and optionally an expiry. The token is shown once, immediately after you create it. If you lose it, revoke it and make a new one. Tokens are scoped to a single organization and can be revoked at any time from the same page.Connect Claude Code
Connect Cursor
Add the server to.cursor/mcp.json in the project, or to ~/.cursor/mcp.json globally:
Connect Claude Desktop
Add an HTTP MCP server with the same URL and anAuthorization: Bearer YOUR_TOKEN header. The same shape works for any MCP client that supports HTTP servers with custom headers.
Roles
A token’s role caps what its agent can do. Each tool requires at least the role shown.
Give an agent the lowest role that lets it do its job. An agent that only inspects builds needs
viewer. For a coding agent, developer is the usual choice and the default.
Renamed and merged tools
The tool surface was reorganized around workspace / project / service. If you have prompts, scripts or saved instructions that name the old tools, this is the mapping:The tools
Every tool, with the minimum role each requires. The full reference, grouped and with each tool’s arguments, is at slipway.sh/agents/tools.Discovery
Create
Compose
Deploy and watch
Manage
Configuration
Platform
Logs and exec
Saving a variable or secret does not restart anything: deploy afterwards for the change to reach the running pods. Both tools say so in their response.
get_deployment_logs is clamped by your plan’s history window, the same as the console. See Plans.
For a worked end-to-end session, see How to let a coding agent deploy and test its own code.
Security
- Tokens are stored hashed. The plaintext exists only at create time.
- Every tool is scoped to the token’s organization, so an agent cannot reach another organization’s data.
exec_in_serviceruns arbitrary commands in your pods, andset_secretwrites credentials. Keep tokens to the minimum role, use short expiries on shared machines, and revoke anything you are unsure about.